2りんかんイエローハットData breach / unauthorized access incident
- Occurred on
- April 20, 2026
- Announced on
- June 19, 2026
- Severity
- SCompromise of deep personal data or usable credentials.
- Scale
- 3,180,000 people
- Main impact
- Personal names, contact information, dates of birth, vehicle information, etc., and app IDs and passwords of approximately 318万人 were leaked.
- Information involved
- Email addressUser / member IDPasswordPhone numberHome addressFull nameDate of birth
- Cause / key point
- Member data were obtained through unauthorized access that exploited the app's API.
- Industry
- Retail & e-commerce
- Listing / capital
- UnlistedParent company: イエローハット(東証プライム 9882)
2りんかんイエローハット is a subsidiary of イエローハット.
- Sources
- Last updated
- October 20, 2026
Stock price reaction to the disclosureイエローハット・親会社 / 東証プライム 9882
Stock information is reference data based on Yahoo Finance and may be delayed. This site does not solicit or advise investment and does not guarantee the accuracy or completeness of this information. We accept no liability for any investment decision based on it.
Is this incident worth paying attention to?
Written & reviewed

Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Other incidents at 2りんかんイエローハット
Same attack method
- SSソースネクスト2026.10.15 announced・Affected 22,519,960 records
- SSバーガーキング・ジャパン(公式アプリ)2026.10.15 announced・Affected 11,180,000 records
- SS焼肉きんぐ2026.10.05 announced・Affected 10,788,963 records
- Bユミルリンク(メール配信システム)2026.10.19 announced・Affected 9,000,000 records
- SSタイムズカー(タイムズモビリティ)2026.09.25 announced・Affected 6,600,000 accounts
- Sブックオフグループ(ブックオフコーポレーション)2026.10.09 announced・Affected 6,383,279 people
Same industry
- S阪急阪神百貨店(H2O ID等)2026.10.19 announced・Affected 1,260,000 records
- Sパピレス(Renta!)2026.10.19 announced・Affected Unknown
- Sジグザグ(WorldShopping)2026.10.19 announced・Affected 301 people
- Sアクティブ(通販サイト)2026.10.06 announced・Affected 54,916 records
- SMrMax2026.10.06 announced・Affected 1,735,154 people
- S講談社BECK(旧ビーシーのメール)2026.10.02 announced・Affected 1 records
Attack method classification: Unauthorized access (method undisclosed)(Breached, but the technique was not identified or disclosed)
Read the Unauthorized access (method undisclosed) guide and national trends →