Yamato Transport Confirms About 5.26 Million Records Taken in Breach of クロネコ代金後払い Service

According to Yamato Holdings' fourth report (dated October 16, 2026), the クロネコ代金後払いサービス suffered unauthorized access by a third party on September 28, 2026, and an investigation confirmed that some information was illicitly taken. The disclosed items taken are: user information (name, address, telephone number, email address, item details, and internal management information) of about 5.26 million records, delivery destination information of about 50,000 records, and merchant information of about 4,100 records. Credit card information and password information were not included. Items that had been listed as "possible leakage" in the second report—billing amounts, outstanding receivables, and employee names—were not confirmed as taken in the fourth report's investigation.

Yamato has stated it will "contact affected individuals individually and sequentially," but no verification page for inquiries has been provided. If individual contact is difficult due to changes in registered information, Yamato says it will treat the publication of the fourth report as notification. Contact points listed in the fourth report include the email [email protected], the user-facing form indicated in the third report, and the number 0570-666-775. Users are urged not to follow links or suspicious notices that do not come from the official site.

While secondary misuse of the stolen data has not been confirmed at this time, Yamato asks users to avoid opening links or attachments in suspicious emails or SMS messages and to be cautious about suspicious phone calls or postal items. It has already taken measures such as extending the payment deadline for payment slips whose due dates fall on or after September 28, 2026 by 17 days, taking the service suspension period into account. Yamato says it will strengthen its information security measures going forward with advice from external specialists.