Bandai Namco Entertainment and BANDAI SPIRITS said on October 27 that 346,247 records, including email addresses, of users registered to THE GUNDAM BASE MEMBERS, the points service for the official Gundam goods store, had leaked. The cause was unauthorized access to Yumirink, the email delivery company the service is outsourced to.
THE GUNDAM BASE MEMBERS is a service users log in to with a Bandai Namco ID. The leaked data is the email addresses of THE GUNDAM BASE MEMBERS users and the internal identifiers used to manage Bandai Namco IDs. Login passwords, credit card information, names, addresses and purchase histories were not included.
The two companies said Yumirink reported to them on October 26 that there were signs that unauthorized access had obtained email addresses and other information. They stopped the affected email delivery service and reported the matter to the Personal Information Protection Commission on October 27.
Services using Bandai Namco ID and THE GUNDAM BASE MEMBERS remain available. Inquiries are being accepted through a dedicated form between 10 a.m. and 6 p.m.
Wider breach at the vendor
The unauthorized access to Yumirink has also caused a leak of 51,628,280 records through its Cuenote FC email delivery service. Central Japan Railway, Resona Bank, Nomura Securities, Cybozu and other companies have said their users' email addresses may have been exposed as a result.