Tully’s Coffee Japan Co., Ltd.
- Aliases / services
- タリーズコーヒージャパン / タリーズ / タリーズコーヒー / Tully's Coffee Japan / Tullys Coffee / Tully’s Coffee Japan Co., Ltd. / タリーズコーヒージャパン株式会社
- Official website
- https://www.tullys.co.jp/
Sources identifying the operating company
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
Tully’s official online store
- Response status
- Not listed
- Response information checked
- 2026-10-29
Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29
The former store incident involved possible exposure of 92,685 customers, including 52,958 with card data. The new store announced for November 13, 2025 does not reuse former member data.
Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.
What users should do
Review affected-card statements and report unknown charges to the issuer. Do not conflate the former store incident with app data leakage.
Official service URL
Source URLs
- Former store investigation, October 3, 2024https://www.tullys.co.jp/information/2024/10/post-14.htmlService and operation documentation
- New store announcement, November 11, 2025https://www.tullys.co.jp/company/pressrelease/2025/11/2025_onlinestore.htmlService and operation documentation
Tully’s official app
- Response status
- Not listed
- Response information checked
- 2026-10-29
Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29
Suspended since October 22 after abnormal access. The October 28 notice reports no identified leakage or balance/points misuse and extends suspension. A reopening update is expected around November 2.
Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.
What users should do
November 2 is not a confirmed reopening date. Birthday coupons remain accessible through the notice sent to the registered email address.
Official service URL
Source URLs
- App suspension extended, October 28https://www.tullys.co.jp/information/2026/10/post-28.htmlService and operation documentation
Related official sources
- Former store investigation, October 3, 2024Official notice; link to this PHP incident unconfirmedFindings apply only to the specified service and incident, not other services or historical breaches.
- New store announcement, November 11, 2025Official notice; link to this PHP incident unconfirmedFindings apply only to the specified service and incident, not other services or historical breaches.
- App suspension extended, October 28Official notice; link to this PHP incident unconfirmedFindings apply only to the specified service and incident, not other services or historical breaches.
Comments