St. Cousair data breach

St. Cousair announced a data breach on Nov 3, 2026 affecting about 878,343 email addresses, exposing email addresses. It happened through a vendor (Arara (email delivery service)). No settlement or compensation has been announced.

What happened

St. Cousair, the Japanese food company behind the Kuze Fuku & Co. and St. Cousair shops, said on November 3, 2026 that 878,343 email addresses on its newsletter list leaked after an outsider broke into the email delivery service of Arara, its email contractor; 27 of them are the company's own test addresses. Its second notice on November 9 confirmed that only email addresses were taken, not names, home addresses, phone numbers, dates of birth, purchase history, member IDs, passwords or card data. People who signed up as members on or before October 30, 2026 are affected.

What should I do?

1. Be wary of emails claiming to come from Kuze Fuku & Co., St. Cousair or Arara, and don't open their links or attachments or reply.
2. St. Cousair says it never asks for passwords or card numbers by email; delete messages that do.
3. Consider tightening spam filtering on the address you registered if scam emails increase.

More data breaches in Japan →

Check the other services you use →