Teollimi

H2O Retailing (Hankyu and Hanshin department stores, H2O ID) data breach

Was I affected?

H2O Retailing (Hankyu and Hanshin department stores, H2O ID) confirmed a breach affecting about 1.3 million people, exposing names, email addresses, addresses and phone numbers. You may be affected if you have an H2O ID, used to book or shop with Hankyu or Hanshin department stores online, including HANKYU HANSHIN E-STORES and Remo Order.

H2O Retailing (Hankyu and Hanshin department stores, H2O ID) breach facts
AnnouncedOct 19, 2026
When it happenedDetected October 16–17, 2026
CountryJapan
People affected1.3 million
Data exposedNames, Email addresses, Addresses, Phone numbers, Dates of birth and Other details
StatusConfirmed by the company or a regulator filing

What happened

H2O Retailing and its subsidiary Hankyu Hanshin Department Stores said on October 19, 2026 that outsiders reached their customer management system through the Hankyu and Hanshin department store reservation site, which was shut down on October 16; the HANKYU HANSHIN E-STORES and Remo Order sites were also accessed and shut down on October 17. Personal data for about 1.26 million H2O ID members, nearly all members, leaked: H2O ID, name, gender, email address, postal code, address, mobile and landline numbers, age, date of birth and which services the member used. Whether order history, partial card details (card type, last four digits, cardholder name, expiry date) or address book entries held by the two shopping sites leaked was still under investigation. The companies say they do not hold full card numbers or security codes, and login passwords were not found to have leaked.

What should I do?

  1. Expect fake emails, texts and calls that use your name, address or birth date; the companies say their own notices come only from noreply@h2o-retailing.co.jp.
  2. If you shopped on HANKYU HANSHIN E-STORES or Remo Order, check your card statements for charges you don't recognize.
  3. Don't click links in unexpected messages about refunds or reservations; contact H2O's hotline listed on its official notice instead.
  4. Watch for follow-up notices about the online stores, since the review of order and card data was still ongoing.
XRedditWhatsApp

More data breaches in Japan →

Check the other services you use →

Sources