Ceres Discloses Data Breach at Point Income and CoinTrade Exposing Customer Records
Japanese company Ceres has confirmed two separate incidents of personal data exposure affecting its Point Income loyalty platform and its subsidiary Mercury's CoinTrade cryptocurrency service. In the first case, unauthorized access to a development environment allowed third parties to view backup customer data including nicknames, email addresses, encrypted passwords, and birth dates for approximately 11,100 users. A smaller set of device identifiers was also exposed. The second incident occurred through a third-party email service provider Arara, whose repica platform leaked 88,289 email addresses belonging to CoinTrade customers. Ceres and Mercury have notified affected users, blocked further access, and suspended email campaigns while investigating the root causes with their vendors.
ScanNetSecurityNov 8, 2026Translated from Japanese