@cosme

Unauthorized Access to @cosme Exposes Partial Data of Approximately 3 Million Users

Istyle Inc. announced on November 2 that unauthorized access to its @cosme platform had occurred, with confirmation of the data leak received on October 28. Partial member information belonging to roughly 3 million users registered under the @cosme common ID was exposed to external parties. The compromised data fields include user IDs, nicknames, full names in both kanji and kana, postal codes, addresses, telephone numbers, email addresses, gender, dates of birth, skin type, and hair type. Istyle is contacting all affected customers individually through known contact channels, with the process expected to conclude by November 6. The company has engaged a third-party security firm to determine the root cause and full scope of the incident while implementing measures to limit further damage. Future remediation steps will be developed based on the findings of the external investigation.