FANCL and Attenir Data Breach
Kirin Holdings and its Japanese cosmetics and dietary supplement subsidiary FANCL Corporation disclosed on October 16, 2026, that unauthorized access occurred between October 3 and October 10, 2026, across the e-commerce platforms of FANCL and its consolidated subsidiary Attenir.
Exposed Data Types
10- Names
- Physical addresses
- Phone numbers
- Email addresses
- Dates of birth
- Genders
- Passwords
- Security questions and answers
- Purchases
- User IDs
About This Breach
The breach exposed personal data belonging to 785,496 members in total, comprising 368,184 FANCL Online customers and 417,312 Attenir Online customers.
Compromised customer records included full names, postal addresses, telephone numbers, email addresses, dates of birth, gender markers, customer IDs, loyalty point balances, security questions, and hashed passwords associated with secondary email addresses. Credit card and payment details were not stored in the affected dataset.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
