Aoki Holdings (TYO:8214) said an investigation into a January cyberattack on subsidiary Kaikatsu Frontier found no evidence of stolen personal data or secondary damage, according to a Monday filing on the Tokyo Stock Exchange.
The attack, detected on Jan. 18, involved unauthorized access to a server used for managing customer accounts.
The investigation, conducted with an external security specialist, confirmed that data from about 7.3 million records may have been compromised.
Affected information includes names, phone numbers, addresses, membership details, and point balances, but not credit card data or passwords.
Aoki reported the breach to Japan's Personal Information Protection Commission and has since updated security protocols, installed new software patches, and tightened access controls.