Sagawa Express says up to about 53.23 million sets of personal information (with many duplicates) may have been compromised through unauthorised access to its parcel tracking service, according to The Japan Times
Japanese transport company Sagawa Express has announced that up to about 53.23 million sets of personal information may have been compromised due to unauthorised access to its delivery tracking service, according to The Japan Times (Jiji, 24 Oct 2026).
According to The Japan Times, the affected data includes the names, addresses and phone numbers of senders and recipients on shipping labels from 21 June to 30 September, as well as the addresses and phone numbers of corporate customers; Sagawa Express said the figure does not necessarily reflect the number of affected customers because there are many overlaps between senders and recipients. Sagawa Express announced the figure on 23 October in a follow-up to the unauthorised access it disclosed on 30 September, according to ITmedia NEWS, which reports that the data also covers members of its 'Smart Club' web service (including email addresses and member IDs), that credit card information and passwords are not included, and that the cause is still being investigated with outside specialists.
The company has resumed the tracking service but some other web services remain suspended, according to both outlets.
Sources: The Japan Times; ITmedia NEWS.
- Product
- Sagawa Express parcel tracking service (お荷物問い合わせサービス)
- Versions
- n/a — unauthorised access detected 30 Sep 2026; cause under investigation
- Exploited in Australia?
- unknown
- Patch to
- People who sent or received Sagawa Express parcels in Japan between 21 June and 30 September 2026: treat delivery-themed texts, emails and calls (missed-delivery notices, address checks, apologies) with suspicion, don't open their links, and check parcel status only through the official Sagawa site or a branch. Merchants shipping via Sagawa: prepare customer messaging and check your own breach-notification duties in Japan.