7NOW user information leaked due to unauthorized access

silver iMac and Magic keyboard on white surface — Quaritsch Photography / Unsplash

On November 3, Seven-Eleven Japan announced that user information from its product delivery service, 7NOW, was leaked due to unauthorized access at a delivery contractor. The service continues to operate normally. The unauthorized access was identified on November 1 by CBcloud, which manages the service "PickGo," and it was confirmed on the 3rd that user information had been obtained by a third party.

The leaked information includes 164,180 records of customer names (in Kana), 4,762 records of names and addresses, and 209 records containing names, addresses, phone numbers, and postal codes. Additionally, some order dates, store names, addresses, and product names were also compromised.

However, there was no leak of credit card information, IDs, or passwords. Seven-Eleven Japan confirmed that there was no evidence of leakage or alteration of their authentication information or system settings. As of the announcement on November 3, no damage from the unauthorized use of the leaked information had been reported.

CBcloud has blocked communication from the source of the unauthorized access, suspended accounts that were improperly used, and fixed vulnerabilities that were exploited. They have also restricted certain functions and access from outside Japan. The incident has been reported to the Personal Information Protection Commission. Seven-Eleven Japan is contacting affected users via SMS to the registered phone numbers.