Japan's Muji faces questions over retained card data after cyberattack
By Genta Nakanishi ( November 6, 2026, 05:01 GMT | Insight) -- Japanese retailer Ryohin Keikaku faces questions over its handling of customer credit-card information after a cyberattack potentially exposed 1.09 million card numbers that had remained in its systems despite a deletion request from Japanese card issuer Credit Saison in 2021. The incident raises questions about data-retention obligations and regulatory oversight under Japan's privacy and credit card laws.Japanese retailer Ryohin Keikaku, operator of the Muji brand, faces questions over its handling of customer credit-card information after a cyberattack potentially exposed 1.09 million card numbers that had remained in its systems despite a deletion request from Japanese card issuer Credit Saison in 2021....
Prepare for tomorrow’s regulatory change, today
MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.
Know what others in the room don’t, with features including:
- Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
- Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
- Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
- Curated case files bringing together news, analysis and source documents in a single timeline
Experience MLex today with a 14-day free trial.