Japanese delivery company Sagawa Express has said that up to 53.23 million records, including names, addresses and phone numbers from parcel labels, may have leaked after unauthorised access to its package inquiry service.
Japanese delivery company Sagawa Express has said that up to 53.23 million records may have leaked after unauthorised access to its package inquiry service, in one of the largest data disclosures in Japan this year. The company announced the figure on October 23, saying the records included the names and addresses of senders and recipients written on parcel labels, as well as phone numbers in some cases.
The affected information covers labels from June 21 to September 30, and the company resumed its package inquiry service on October 23 while urging customers to be vigilant against suspicious emails and messages claiming to come from delivery companies. Sagawa said no misuse of the personal information had been confirmed, and that an investigation was continuing to establish the exact number of people affected.
The 53.23 million figure counts records, not people, because the same names appear on many shipping labels, so the true number of affected customers will be lower. That distinction matters for households trying to judge their own exposure: a single customer who sent or received several parcels could appear many times in the count, and the company has said it will organise the data further before giving a final number of individuals.
Japanese broadcasters TV Asahi, Fuji TV and Kansai TV all reported the same 53.23 million figure, the same June 21 to September 30 window, and the same statement that no misuse had been confirmed, and a summary citing NHK gave the same account. The reports agree that the breach came through the package inquiry service, and none of them claims that financial information or parcel contents were involved.
The disclosure lands in a year in which Japan has already counted dozens of breaches of one million records or more, and it puts pressure on delivery and e-commerce companies to explain how label data is stored and who can query it. Sagawa has not yet said when its final count of affected individuals will be ready, and customers who used the service in the affected period are being told to treat unexpected delivery messages with caution until then.