Last Updated: 2019.01.30
Notice of Possible Leakage of Personal Information and Apology to Potentially Affected External Marketing Partners
UNIQLO CO., LTD.
to Japanese page
UNIQLO today confirms that on January 15, 2019 it first learned that some personal information belonging to a group of external marketing partners may have leaked, since the URL, user IDs and passwords of a website set up to manage such information were unintentionally made public. However, UNIQLO can verify that this issue has no link to personal data on file within UNIQLO.com, UNIQLO mobile applications, or UNIQLO physical stores, including credit card and other confidential information.
The total number of potentially affected individuals is 804 (448 in Japan and 356 abroad). These individuals are part of a group of external marketing partners that have engaged with UNIQLO in the areas of product development and promotional activities.
Upon realizing the situation, UNIQLO took immediate steps to secure the website, including changing the passwords and making the website private. In addition, UNIQLO has been contacting the potentially affected individuals to apologize for what happened.
Although UNIQLO has no proof that personal information has indeed leaked or been improperly accessed, it deeply regrets the incident and wishes to apologize to all who may have been affected.
UNIQLO takes its responsibilities to safeguard personal data extremely seriously. Accordingly, the company will continue to investigate the incident. At the same time, it has taken additional steps to enhance its security measures and protections with the advice of external experts.
1.) Personal information that may have leaked could include the following:
Name, gender, birthdate, address, telephone number, email address, occupation, industry and child status
2.) The period of time that the URL of the website, user IDs and passwords may have leaked, or been improperly accessed, is from September 1, 2017 until the early morning of January 16, 2019.
3.) Immediate actions taken:
A UNIQLO employee first noticed what had happened on the evening of January 15, 2019. The employee immediately contacted the outsourcing party that manages the website to delete the data. In the early morning of January 16, 2019, UNIQLO confirmed that the data had been removed, and by noon the same day all passwords were changed, so that only approved personnel could access the website.
4.) Measures to prevent recurrence:
UNIQLO will strengthen how it manages outsourced parties and internal information security. As part of this procedure, it will fortify the screening process when selecting such companies and will conduct regular reviews. Regarding internal information security, the company will thoroughly check the development and introduction of all internal systems, and conduct regular reviews.
For enquiry, please visit the link here.
