On October 27, Sagawa Express released an update regarding the unauthorized access to its web service, "Sagawa Express Smart Club."
<Image of how it can be used on a smartphone>
This incident involves Sagawa Express detecting suspicious access to its web service, "Sagawa Express Smart Club," which appears to have been obtained illegally by a third party using stolen IDs and passwords. As a result, it was discovered that customer accounts had been accessed illegally.
This announcement follows the one made on October 15, 2025, and includes updated information on the "date and time of occurrence" and "requests to customers."
According to this report, the unauthorized access occurred between 5:22 PM on October 15th and 12:00 PM on October 16th. Compared to the previously announced period of 5:22 PM on October 15th to 8:42 PM, this period is longer, including a later time.
Furthermore, the "two-factor authentication for My Page" feature, which was previously listed as "recommended," has been changed to "required" in this announcement. Access to certain websites, which was restricted in the previous announcement, has also been lifted.
The company states that it has already identified and blocked the IP addresses that made the unauthorized access, and that there has been no impact on servers or business systems, nor has there been any leakage of credit card information or bank account details. Customers who may have been affected by the unauthorized login will be contacted individually.
■ Sagawa Express Official Website
佐川スマートクラブ
