Teollimi

Bookoff (Bookoff Group Holdings) data breach

Was I affected?

Bookoff (Bookoff Group Holdings) confirmed a breach involving up to 6.4 million records (duplicates possible), exposing names, dates of birth, email addresses and phone numbers. You may be affected if you are a Bookoff member or hold a Bookoff point card registered online.

Bookoff (Bookoff Group Holdings) breach facts
AnnouncedOct 9, 2026
When it happenedDetected October 6, 2026
CountryJapan
Records exposed (may include duplicates)6.4 million
Data exposedNames, Dates of birth, Email addresses, Phone numbers, Addresses, Passwords and Other details
StatusConfirmed by the company or a regulator filing

What happened

Secondhand goods retailer Bookoff Group Holdings said on October 9, 2026 that an outsider accessed the membership management system run by one of its subsidiaries, which it confirmed on October 6, and that member data was taken. Up to about 6.43 million membership numbers may be affected; the company said this is a count of member numbers, not people. The data may include names, dates of birth, gender, email addresses, phone numbers, postal addresses, hashed passwords, point card numbers and member numbers. The system did not hold credit card or other payment data, and Bookoff said it had not found the data published or misused.

What should I do?

  1. Be wary of emails, texts and calls posing as Bookoff; the company says it never asks for passwords, verification codes, card or bank details that way.
  2. Change your password on any other service where you used the same one as your Bookoff account.
  3. Don't open links or attachments in unexpected messages; go to Bookoff's site or app directly.
  4. Report any activity on your Bookoff account that you don't recognize to Bookoff's customer contact.
XRedditWhatsApp

More data breaches in Japan →

Check the other services you use →

Sources