Fancl and Attenir e-commerce breach exposes 785,496 members

Fancl Corp. and its subsidiary Attenir Corp. disclosed on October 16, 2026 that unauthorized access to their e-commerce sites between October 3 and October 10 leaked the personal information of 785,496 members in total: 368,184 Fancl customers and 417,312 Attenir customers. The leak was found in an internal investigation on October 15. The data includes names, addresses, email addresses, phone numbers, dates of birth, gender, and customer IDs.

The companies said login passwords and payment information such as credit card details were not included, that the functions involved have been shut down, and that they reported the incident to the Personal Information Protection Commission and consulted the police on October 16. No secondary damage has been confirmed.

Sources: BigGo Finance; Alo Japan (reporting Kyodo News)