H2O Retailing Hankyu Hanshin breach may have exposed about 1.26 million member records

H2O Retailing announced on October 19, 2026 that unauthorized access to three websites operated by its subsidiary Hankyu Hanshin Department Stores Inc., including its official online store, may have exposed personal data across about 1.26 million H2O ID accounts, almost the entirety of its membership database. Potentially compromised data includes names, email and mailing addresses, telephone numbers, birthdates and the last four digits of credit card numbers.

MBS News reports the company says the information leaked, that no secondary damage has been confirmed, that the incident was reported to police, and that the company apologized and urged caution on unsolicited communications. Because the detailed reporting describes the about 1.26 million figure as accounts rendered vulnerable, SecurTek lists this breach without adding that figure to the records exposed total, and will update the item when a confirmed count is published.

Sources: EuropeSays (carrying The Asahi Shimbun and Japan Times reporting); MBS News (TBS News Dig report, October 19, 2026)