Lawson
- Aliases / services
- ローソン / LAWSON / 株式会社ローソン / Lawson / 罗森
- Official website
- https://www.lawson.co.jp/
Sources identifying the operating company
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
Lawson ID
- Response status
- Not listed
- Response information checked
- 2026-10-30
Current re-audit: official_incident_notice · Research date: 2026-10-30
Unauthorized access on September 12–14, 2026 affected 2,155,345 ID records, including names and gender, phone and addresses where registered. The October 24 correction excluded emails/newsletter settings but noted possible birth-date exposure.
Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.
What users should do
Watch for suspicious messages or calls; check your affected status through the official inquiry form.
Official service URL
Source URLs
- Updated 2026-10-26: official service noticehttps://www.lawson.co.jp/contents/cont07/1533174_3310.htmlService and operation documentation
Lawson app reservations
- Response status
- Not listed
- Response information checked
- 2026-10-30
Current re-audit: official_incident_notice · Research date: 2026-10-30
Unauthorized access on September 17, 2026 exposed names, phone numbers and partial card numbers for 26 reservation records. Reservations resumed on October 19. The store-search outage below is a separate contractor incident.
Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.
What users should do
Update the app before use and consult the separate official notice about store-search restrictions.
Official service URL
Source URLs
- Updated 2026-10-26: official service noticehttps://www.lawson.co.jp/contents/cont07/1533174_3310.htmlService and operation documentation
Store search for app reservations
- Response status
- Not listed
- Response information checked
- 2026-10-30
Current re-audit: official_incident_notice · Research date: 2026-10-30
The separate October 26, 2026 notice reports store-search suspension after contractor access. It explicitly states that Lawson systems and customer information were unaffected.
Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.
What users should do
New store selection is unavailable, but previously saved MY stores, cancellation within the reservation period and collection remain available. Check official reopening notices.
Official service URL
Source URLs
- 2026-10-26: separate store-search incidenthttps://www.lawson.co.jp/contents/cont07/1533805_3310.htmlService and operation documentation
Related official sources
- Official operator identityOfficial information directoryIdentifies Lawson as the operator.
- Updated 2026-10-26: official service noticeOfficial notice; link to this PHP incident unconfirmedVerifies affected data, service scope and user guidance.
- 2026-10-26: separate store-search incidentOfficial notice; link to this PHP incident unconfirmedConfirms unaffected customer data and remaining booking options.
Comments