Belc data breach
Belc announced a data breach on Oct 29, 2026 affecting about 786,739 email addresses, exposing email addresses and names. It happened through a vendor (Arara (email delivery service)). No settlement or compensation has been announced.
Was I affected?
Belclub members who received Belc's email newsletters and some users of the Otodoke Pack delivery service.
| Announced | Oct 29, 2026 |
|---|---|
| When it happened | Intrusion at email vendor Arara found October 28, 2026; Belc said on October 29 that no customer data had leaked, then confirmed a leak on November 3 |
| Country | Japan |
| Email addresses exposed | 786,739 |
| Data exposed | Email addresses and Names |
| Through a vendor | Arara (email delivery service) |
| Status | Confirmed by the company or a regulator filing |
What happened
Belc, a supermarket chain based in Saitama, Japan, said on November 3, 2026 that 786,739 email addresses and the names of 2,352 users of its Otodoke Pack delivery service leaked after an outsider broke into the email delivery service of Arara, which sent emails to members of its Belclub loyalty program. On October 29 Belc had said no customer data was involved. Card numbers, bank and payment details, home addresses, phone numbers, dates of birth and passwords were not part of the leak. Belc has paused its emails with no date set to resume.
What should I do?
- Be wary of emails claiming to come from Belc, Arara or other real companies, and delete them without opening links.
- Belc says it never asks for PINs or card details by email.
- Check flyers and points in the official Belc app or site rather than through email.
Check the other services you use →