---
title: 'ShopServe breach in Japan exposes about 23.36 million customer records'
url: 'https://securteksecurity.com/news/shopserve-estore-breach-2336-million-customer-records'
markdown: 'https://securteksecurity.com/news/shopserve-estore-breach-2336-million-customer-records.md'
date: '2026-10-16'
description: 'E-Store, the operator of ShopServe, an e-commerce platform used by 7,858 shops, published its final report on October 16, 2026 on unauthorized access to its servers between May and August 2026. Customer information from merchant sites using the platform was transmitted externally, affecting about 2…'
taxonomy:
  category:
    - Breaches
  tag:
    - japan
    - retail
---

# [ShopServe breach in Japan exposes about 23.36 million customer records](https://securteksecurity.com/news/shopserve-estore-breach-2336-million-customer-records)

   16th Oct 2026   [japan](https://securteksecurity.com/tag:japan#body-wrapper) [retail](https://securteksecurity.com/tag:retail#body-wrapper)  

E-Store, the operator of ShopServe, an e-commerce platform used by 7,858 shops, published its final report on October 16, 2026 on unauthorized access to its servers between May and August 2026. Customer information from merchant sites using the platform was transmitted externally, affecting about 23,356,000 people. The data includes names, addresses, phone numbers, and workplace information; about 2.09 million of the records also include credit card holder names and partial card numbers.

E-Store confirmed the breach on August 1, 2026 and cut off communications from the attack source. The final count is up from the 8.85 million records first reported in August. As of October 16, the company says no secondary damage has been confirmed.

Sources: [BigGo Finance](https://finance.biggo.com/news/4def9e67-e34b-41df-a28c-d442c56749b6); [Bitcomme](https://bitcomme.com/over-23-35-million-personal-records-leaked-from-japans-shopserve-e-commerce-platform-including-some-credit-card-data/)

---

## Navigation

- Parent: [News](https://securteksecurity.com/news.md)
- Previous: [SEC names AI a priority area for its fiscal 2027 examinations of Wall Street firms](https://securteksecurity.com/news/sec-names-ai-priority-fiscal-2027-examinations.md)
- Next: [Silent Lynx espionage campaign exploits WinRAR flaw against nine CIS governments](https://securteksecurity.com/news/silent-lynx-espionage-winrar-flaw-cis-governments.md)