SecurityNov 4, 2026, 2:00 AM UTC·1 min read

Nojima Online Breach Exposes About 7 Million Member Records

Japanese electronics retailer Nojima says unauthorized access to its member system leaked around 7 million records. Its online store and a used-phone buyback site are suspended.

A laptop screen showing a login page with a padlock icon, symbolizing a data breach at a Japanese online electronics retailer. — Image: ITmedia NEWS

SUMO

Dialo

ediviewer

Nojima announced on November 2 that a third party gained unauthorized access to the member management system of its e-commerce site Nojima Online, leaking about 7 million member records. The company detected and confirmed the intrusion on November 1 and verified the same day that personal data had left its systems.

Two services are affected: Nojima Online and the company's used-smartphone buyback site. Both have been temporarily suspended, and Nojima has not said when they will return.

What was exposed

The leaked data includes names in kanji and kana, login IDs, encrypted passwords, email addresses, postal addresses, postal codes, phone numbers, dates of birth and gender. Members who have already left the service are not included.

Nojima says neither site stores credit card information, so card details were not part of the leak. The company has forcibly reset the login passwords of the affected accounts and is guiding users through setting new ones.

Response and outlook

The retailer says it has blocked the external access, strengthened its security measures and monitoring, and consulted the police authority with jurisdiction. It will announce a reopening date once it has confirmed the sites are safe to operate.

For members, the main risks are phishing emails, scam calls or mail that exploit the exposed contact details and birth dates. Anyone who reused their Nojima password on other services should change it there as well, since even encrypted passwords can be a target. The incident adds to a run of recent breaches at Japanese online retailers and service providers, underscoring how much customer data sits in member databases.