All Breaches
Lawson Japan Data Breach
Lawson, Inc., one of Japan's leading convenience store franchise operators, disclosed an unauthorized access incident affecting its Lawson ID authentication ecosystem and mobile customer rewards application.
2.2 Million
Reported Records
8
Data Types
Critical
Severity
Oct 20, 2026
Last updated
Exposed Data Types
8- Names
- Email addresses
- Phone numbers
- Dates of birth
- Physical addresses
- Loyalty card identifiers
- Purchase histories
- Hashed passwords
About This Breach
The incident compromised approximately 2.15 million customer profiles. Exposed records include full names, registered email addresses, phone numbers, birth dates, mailing addresses, Ponta/d-Point loyalty account links, store purchasing records, and hashed passwords.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
