A Up to 442,779 peopleOn September 26, 2026, a large volume of unauthorized access from overseas hit Starts Publishing's "OZmall" site, and the email addresses of members and some former members, plus names and addresses (down to prefecture) of some people, may have been viewed. The first report (September 27) put the figure at up to 447,610 people and the second report (October 1) at up to 442,779. No sign of phone numbers or detailed street addresses being viewed has been found. Credit card information is handled by an external payment system and is out of scope. No secondary damage has been confirmed.
Unauthorized access & data leakPossibleOfficial statement
B About 59,000 recordsA third party accessed the Metro Point Club member services without authorization, and about 59,000 email addresses may have been viewed or obtained from a server holding addresses for which delivery had been suspended. The server is stated to hold no member information other than email addresses.
Unauthorized access & data leakPossibleOfficial statement
