{
  "id": "hana-cupid-members",
  "url": "https://ohshit.app/incidents/hana-cupid-members/",
  "title": "Hana-cupid discloses a member-data breach potentially affecting 4.24 million records",
  "level": 4,
  "level_name": "septic-tank-blew",
  "date": "2026-10-28",
  "date_is_approximate": false,
  "updated": null,
  "tags": [
    "Hana-cupid",
    "data breach",
    "credentials"
  ],
  "ecosystems": [],
  "summary": "Hana-cupid confirms member-data leakage. Up to 4,238,242 records may be affected, including login IDs, email addresses and protected passwords. Payment details are excluded.",
  "splash": "Internet Hana-cupid and Business Hana-cupid members registered directly with an email address",
  "wipe": "Reset your password through the official site, replace reused passwords elsewhere and watch for phishing",
  "in_the_wild": "yes",
  "source_exception": null,
  "cves": [],
  "fixed": [],
  "checklist": [
    {
      "title": "Check your membership and reset your password",
      "hint": "Use account recovery at i879.com. Former members may also be affected; their accounts are disabled. External marketplace, telephone-only and florist purchases without direct email registration are excluded."
    },
    {
      "title": "Replace reused passwords and reject suspicious messages",
      "hint": "Give every account a unique password. Open the official site yourself instead of following unexpected email links; never provide passwords or authentication codes to an unsolicited contact."
    }
  ],
  "sources": [
    {
      "name": "Hana-cupid breach notice and FAQ",
      "url": "https://www.hana-cupid.co.jp/news/news/20261028/index.html",
      "says": "Confirms leakage; the published count is potentially affected records, not independently verified unique victims.",
      "primary": true
    }
  ],
  "headline": null,
  "one_liner": null,
  "in_the_wild_note": "The operator confirms unauthorized access and data leakage.",
  "mitigation": null,
  "timeline": [
    {
      "date": "Oct 14–15, 2026",
      "title": "Unauthorized access occurs"
    },
    {
      "date": "Oct 19, 2026",
      "title": "Investigation confirms leakage"
    },
    {
      "date": "Oct 28, 2026",
      "title": "Public notice and customer notifications begin"
    }
  ],
  "body_markdown": "The operator says passwords were stored irreversibly, but does not identify the algorithm or parameters. It recommends password changes and reports no confirmed secondary misuse. Names, addresses, phone numbers and card data are excluded. Attack paths were blocked; investigation continues. L4 reflects the scale of the credential-data exposure."
}