Following a string of personal data leaks from repeated cyberattacks, victims are increasingly considering class-action lawsuits. According to a lawyer’s analysis, compensation for leaks limited to information like driver’s license details would run around ¥10,000–50,000, while cases where secondary damage such as fraudulent use actually occurs could see payouts of ¥50,000–100,000. On 5ch, posters reported a wave of breach notifications from Times Car (a car-sharing service) and JR East’s “eki-net” ticketing service, sharing the specific details of what information had leaked. Meanwhile, skepticism ran through the thread about how meaningful the compensation really is — comments like “they’ll probably just fob us off with a ¥300 QUO card” — alongside a pessimistic camp saying “proving damages is hard, so lawsuits are a long shot” and a more hardline camp insisting “they should fight this all the way.”
Wave of cyberattacks sparks talk of class-action suits — companies’ compensation seen at “¥10,000–50,000 for leaked license info,” “¥50,000–100,000 if personal info is misused and secondary damage occurs” — lawyer explains
Kansai TV
Please see the source for the full article
Source: news.yahoo.co.jp / Original article here
Nothing's going to change unless the business world actually gets punished.
Some companies have been handling personal data while running security that hasn't been updated in 20 years.
Japanese people are too docile, so companies completely walk all over us.
Shipping would cost more than that.
1,500 points (in their own in-house service points)
They're citing an actual going rate, so there's probably real money in it.
Here's the gist of it:
List of customer information confirmed leaked in this incident:
– Name
– Department (for corporate members)
– Address
– Date of birth
– Phone number
– Email address
– Driver's license info (photo of the license)
That's about everything that leaked.
I use it for both work and personal stuff, so I got the full combo. Should I be worried?
Got an email like this today:
Thank you for using eki-net.
Following unauthorized access that occurred at IDC Frontier, it has come to light that your email address may have leaked.
No leak has been confirmed at this time, but the possibility that it was viewed or obtained cannot be completely ruled out.
We deeply apologize for the serious concern this has caused you.
■Personal information that may have leaked
– Email address
*There is no possibility that your name, address, phone number, credit card number, etc. were leaked.
Once again, we sincerely apologize for the concern this has caused you.
That's just rage-baiting for replies.
[BREAKING] Sompo Japan may have leaked info on 60,000 customers ★2 [Flea Market★]
https://asahi.5ch.io/test/read.cgi/newsplus/1791368369/130
130 Name: Anonymous Donburako [] Posted: 2026/10/07 (Wed) 19:53:48.63 ID:yVO+K1dN0 [1/30]
I got an email from Times Car too.
The personal info of mine that leaked was:
– Name
– Company name
– Department
– Home address
– Date of birth
– Phone number
– Email address
– Driver's license info
That's about it.
"Is it the public's fault?" — Digital Minister Furukawa's remark "protect your own information yourself" stirs controversy… distrust mounts over the government's data defenses [Taru-fun★]
https://asahi.5ch.io/test/read.cgi/newsplus/1791383025/798
798 Name: Anonymous Donburako [] Posted: 2026/10/08 (Thu) 01:03:29.03 ID:xjD0GP4N0 [1/4]
I got an email from Times Car too.
The personal info of mine that leaked was:
– Name
– Company name
– Department
– Home address
– Date of birth
– Phone number
– Email address
– Driver's license info
That's about it.
that this is probably just going to get quietly dropped lol.
If you can't pin down exactly where the leaked data ended up, prosecuting is going to be tough.
That's not true.
That's just a weak excuse.
Fight it all the way.
Justice wins in the end.
Tough call whether it's worth joining…
And then the lawsuit participant list leaks too.
We're at the point where it wouldn't be weird to see ads for it.
The government moves too slowly and isn't looking at this from the public's perspective.
So it's a bit late to make a fuss about that stuff leaking now, isn't it?
Says the kid who's never had a landline lol.
Idiot. It's worth ¥100 trillion per person.
¥50,000 for the emotional distress is on the cheap side.
I'd want at least ¥100,000.
Don't hold back.
It's ¥100 trillion per person.
Holding back is exactly why they walk all over us.
Seize every last asset the employees own.
Make their great-great-grandchildren keep paying off what's left.
Go all out.
Go actually rile the victims up into filing a class action.
You can do it.
That'll bankrupt them!!
They send it to a random 500 people.
Online you see scattered posts saying "I got mine."
But plenty of people didn't get anything.
If they only pay out to people who actually complain, they can get away with spending just ¥10 million lol.
They should just go bankrupt. Nobody needs them anyway.
That would be fraud.
"Shipment will serve in lieu of an announcement." (a classic sweepstakes disclaimer meaning: if nothing arrives, you simply didn't win — no separate notice gets sent)
"Compensation will be sent out, and that shipment will serve as the announcement" lol
That's a violent crime — basically treason against the state.
companies shouldn't be collecting personal information so casually in the first place.
But it's always the companies that haven't thought it through that demand the most personal data.
I really wish that mindset would catch on.
They make you fill in fields that have nothing to do with actually using the service.
Background and key points of this story
In recent years, personal data leaks have come to light one after another at multiple companies, including Times Car and JR East’s “eki-net” (stemming from unauthorized access at its outsourcing partner, IDC Frontier). This article introduces the going rate for compensation in such leaks as outlined by a lawyer: roughly ¥10,000–50,000 for leaks of basic information such as driver’s license details, and ¥50,000–100,000 in cases where secondary damage (such as fraudulent use or identity theft) actually occurs. These figures are only rough benchmarks drawn from past class-action settlements and out-of-court agreements — they are not amounts fixed by law. Where opinions split in the thread was over whether this compensation actually carries any real teeth. Because so many companies have been hit on such a large scale, a pessimistic camp argued it would likely “get swept under the rug” or that “proving damages makes lawsuits hard to pull off,” while a more hardline camp insisted companies “should be fought all the way.” There’s also deep-seated frustration over token compensation in the form of QUO cards or points, and readers may easily be misled into assuming real-world payouts will match the lawyer’s benchmark figures — in practice, they often don’t.
*This article is excerpted and summarized from the 5ch (News Flash+) thread “Wave of cyberattacks sparks talk of class-action suits — “¥10,000–50,000 for leaked license info,” “¥50,000–100,000 if secondary damage occurs” — lawyer explains.”
