-- Auto accessories company Yellow Hat (TYO:9882) said a malicious attack on its subsidiary's server on April 20 may have leaked personal data of "2rinkan" members, according to a Tokyo bourse filing on Thursday.
Exposed data may include names, addresses, phone numbers, birth dates, emails, membership numbers, point balances, app credentials, and vehicle info, but no credit card details as they were not stored on the affected server.
After detecting the breach, the company disconnected the server, suspended some app services, and reported the incident to privacy authorities and police.
Data for the main Yellow Hat brand is unaffected, and the company is setting up a consultation desk while planning prevention measures with external security experts.