Ride On Express, which runs the Gin no Sara, Kamatora and Sushi Joto food delivery brands in Japan, says personal information on up to about 6.5 million registered customers may have leaked after a cyberattack on a server holding their data.
In a notice and a Tokyo Stock Exchange filing on 13 October 2026, the company stressed that 6.5 million is the maximum number of records that may have leaked, not a confirmed count. It said it has not yet found clear traces of a leak, but decided to tell customers who could be affected.
Credit card data was not affected because the company does not hold it. Ordering through the brands’ official websites and apps remains suspended.
What happened
According to the company, it detected unauthorised access to a server it uses from 5 October 2026. Early on 7 October, some servers failed, and the company that runs the server told Ride On Express it had suffered a ransomware attack. Ride On Express shut down its systems.
It was later told that the data it had stored with that company would be hard to retrieve or restore.
What may have leaked
The company said the data that may have leaked comes from people who registered on the official websites or apps. It includes:
- names, addresses, phone numbers and email addresses;
- sex and dates of birth;
- password hash values, a scrambled form of passwords that cannot be read directly;
- order history; and
- Deli Point loyalty member IDs.
Family names and birthdays, and delivery recipients’ details, may also be included if customers entered them. In its customer notice, the company said people who ordered only by phone or through Demae-can or Uber Eats are not affected.
The Japan Times also reported the figure of up to about 6.5 million on 14 October.
Orders and next steps
Since 8 October, the company has taken orders by phone, takeaway in stores, Demae-can and Uber Eats. As of 13 October it could not say when website and app ordering would restart.
The company has reported the incident to Japan’s Personal Information Protection Commission and the police. It said no misuse of the data has been found so far, and warned customers to watch for suspicious calls and emails. It is still assessing the effect on its financial results.
What this means
- The scale is a worst case. About 6.5 million is the upper limit, not a confirmed number.
- Payment cards are safe. The company does not store card data.
- Be wary of phishing. Customers should ignore suspicious emails that ask for passwords.
Sources
- Ride On Express, customer notice (Japanese), 13 October 2026. https://www.rideonexpresshd.co.jp/news/2026/10/3-33.html
- Ride On Express Holdings, Tokyo Stock Exchange filing (code 6082, Japanese), 13 October 2026. https://japanir.jp/wp-content/uploads/2026/10/6082-20261013-01.pdf
- The Japan Times, 14 October 2026. https://www.japantimes.co.jp/news/2026/10/14/japan/crime-legal/sushi-data-breach/
Related stories
- JR East and Viewcard Say About 6.09 Million Accounts May Be Exposed After the IDC Frontier Attack
- Cyber Breaches: SoftBank Cloud Ransomware, Qilin’s 53 Japanese Victims, Asos’s Bigger Leak and Denmark’s Register
- Temairazu Says Up to About 4.45 Million Guests’ Reservation Data May Have Been Viewed or Obtained
