Matsuya Foods Holdings said a third party gained unauthorized access to the management system of its official Matsuya app, and that member information leaked as a result. The company, listed on the Tokyo Stock Exchange's Prime market under code 9887, said in a notice dated October 30, 2026 that it learned of the breach on October 28.
Two sets of records
The notice describes two separate groups of leaked data. The first covers customers registered in the Matsuya official app: member ID, prefecture, name, phone number, date of birth, email address, encrypted password and Matsuya points. Matsuya put that group at 2,000 records and said it could reach 3,000.
The second covers customers who used the company's online ordering, mobile order and delivery services under the app (named in the notice as 松弁ネット, mobile order and 松弁デリバリー): member ID, delivery address, name, phone number and Matsuya points. That group totals 2,377,127 records.
The notice counts records, and does not say how many individual customers are affected or whether the two groups overlap. Encrypted passwords appear only in the first, smaller group's data list. Matsuya said it does not hold credit card information.
Cause and response
Matsuya said it has confirmed unauthorized access by a third party. The cause and how the access became possible are still under investigation.
The company said it is working with partner companies to restore the system quickly, and is taking necessary steps including a report to the Personal Information Protection Commission. It plans to contact affected customers in sequence. It also plans to compensate app members for the period in which the service is suspended, with details to be announced separately. The notice gives no restoration date.
What customers are told
Matsuya warned that the leaked information could be misused for impersonation. It asked customers to be careful with suspicious emails, text messages and calls, and said it never asks for passwords or credit card details by email or phone.
The company set up a dedicated personal information inquiry line, open on weekdays from 10:00 to 16:00 and closed on weekends.