Yamato Transport

Companies / web services

Aliases / services: クロネコヤマト / クロネコ代金後払いサービス / ヤマト運輸株式会社 / Yamato Transport / 雅玛多运输
Official website: https://www.kuronekoyamato.co.jp/

Sources identifying the operating company

https://www.yamato-hd.co.jp/important/info_260929_1.html

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Kuroneko deferred payment

Response status: Not listed
Response information checked: 2026-10-30

Current re-audit: official_incident_notice · Research date: 2026-10-30

The fourth report of October 16, 2026 states: Confirmed theft covers about 5.26 million customer, 50,000 delivery and 4,100 merchant records. Card/password data was excluded; no theft from other services such as Kuroneko Members was confirmed. Billing amounts and outstanding balances were removed from the earlier scope.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Check individual notices. Delete suspicious emails/SMS without opening links or attachments and treat unexpected calls or letters cautiously.

Official service URL

https://www.kuronekoyamato.co.jp/

Source URLs

Official operator identityhttps://www.yamato-hd.co.jp/important/info_260929_1.htmlService and operation documentation

Related official sources

Official operator identityOfficial information directoryIdentifies Yamato Transport as the operator.
2026-10-16: official service noticeOfficial notice; link to this PHP incident unconfirmedVerifies affected data, service scope and user guidance.