yamato-pay-later-2026 · Disclosed 2026-09-29
Yamato Transport: unauthorized access to the pay-later service
Unauthorized access was detected on September 28. The pay-later service was suspended and resumed on October 9; customer, merchant and employee data may have been exposed.
Outcome: Confirmed breach
Entry path and evidence
- Reported fact
Third-party access was confirmed on September 28; the intrusion start is undisclosed.
[s1]p.1 本文 - Reported fact
Potentially affected data include customer contact/billing details, merchant names/codes and staff names; cards and passwords are excluded.
[s2]p.1 §1 - Reported fact
The October 9 resumption notice says possible leakage and its scope remain under investigation.
[s3]本文 第3段落
Timeline
Reported response
- Reported fact
External access was restricted and specialists investigated. Service resumption was announced on October 9.
Cause and mitigation hypotheses
Not assessed. Editorial hypotheses have not been added for this incident; this does not establish safety or a confirmed cause.
Evidence relevant to prevention
Insufficient evidence
The entry mechanism is undisclosed; avoidability cannot be assessed. Inspect exposure, privileges, logs and retained data using the linked rules.
Editorial assessment; not a determination of liability. [s1]
Unknowns and AI involvement
The reviewed disclosures do not establish attacker use of AI.
The entry mechanism, affected count and confirmed exfiltration scope are undisclosed.
Sources
[s1] ヤマト運輸 · Primary source
「クロネコ代金後払いサービス」への不正アクセスの発生について ↗Published 2026-09-29 · Reviewed 2026-10-19
[s2] ヤマト運輸 · Primary source
【第2報】「クロネコ代金後払いサービス」への不正アクセスの発生について ↗Published 2026-10-02 · Reviewed 2026-10-19
[s3] ヤマト運輸 · Primary source
【第3報】「クロネコ代金後払いサービス」再開のお知らせ ↗Published 2026-10-09 · Reviewed 2026-10-19