2026 Attenir — online shop unauthorised access Oct 3–10; 441,162 member records (417,312 people) exposed
Data compromised
Member name, address, date of birth, answers to identity-verification question items, and a hashed secondary password, per the joint notice. Payment information and the main account password are outside the scope.
Technical writeup
Attenir’s figures are from the joint FANCL/Attenir notice of October 16, 2026: 441,162 records covering 417,312 people. The 834,947 combined figure in press coverage adds the two companies’ record counts and is not a unique-person count. The two incidents are separate entries because each company reported its own records. companyConfirmed true.
Root cause
Unauthorised access to the Attenir online shop in the same October 3–10 window as FANCL, found in the joint investigation on October 15. The affected function was stopped. The entry route has not been disclosed.