MUJI Blog

For illegal logging in from a third party to “MUJI net store”

Posted by Jan 30, 2015

We operated by “MUJI net store”, we confirmed that the situation in which the subject to unauthorized login by a third party other than the registered customers person in question has occurred.

Method of this fraud login, as well as unauthorized login you have received in the previous August, ID that may have leaked from other services were utilized (email address) Password ※ “list type account hacking (list type attack) which had been done by the technique of “.

However, the last of unauthorized login later, measures were carried out in our (character authentication and constant monitoring) result, it was able to minimize the damage this time.

However, even this time, for customers that use our the “MUJI net store”, will come to apologize for any concern, inconvenience, apologize. In addition, both the police authorities with regard to this matter will respond in consultation.

With regard to the future, we hope to further hit the measures in order to raise the security level. For release and we are guided by website.

And concerning the following this occurred situation and I would like your report.

※ “list type account hacking (list type attack)” for
a third party to obtain the ID · password of others by any means, to attempt to log in to various sites using as lists these ID · password in, cyber attacks that make browsing of personal information 

 

Remember

■ Incorrect login Overview

September 22, 2014 (Mon) 21:29 ~ September 23, 2014 (Tuesday) until 0:04

unauthorized access count: 18,663 times
which is incorrect login has been ID number: 19

of the customer information you have registered in the “Muji net store”, the contents that may have been viewed in this unauthorized access following This is the street of.

  • Information of “MUJI mile” “MUJI point” that is listed in my top of the page

※ For credit card information, it does not hold in our system.

  • Falsification of registration information by this time of the attack is not currently been confirmed.
  • Unauthorized use of the point, including the purchase and MUJI passport by spoofing is not been confirmed status quo.

■ support to customers of this matter

This time, for the unauthorized login is 19 of ID was, in order to prevent future damage from spreading, and gave a password reset at its discretion. With regard to the customers to possess this will guide today mail password setting methods and Contact individually again.

■ “MUJI net store” login password change of guidance.

Even if we put the customer that is not a target of illegally are logged in this time, to assist our use safer service, we recommend a review of the password. In particular, the password corresponding to the following features will be strongly recommended that you do not want to use it will be less secure.

  • Other services and same ID I’m using a combination of (e-mail address) Password
  • Password is using the “date of birth” and “telephone number” of yourself or your family

Log in to “change of member information”, please execute the change of password.

If you have forgotten your password, please use the “re-setting of the password.”

 

Customers more information, please contact

Contact Form http://www.muji.net/q/contact/

Telephone inquiries Muji net store service center at 0120-86-6404

Hours: (Weekdays 10:00 to 21:00 Saturdays and holidays 10:00 to 18:00)