In January 2021, Rakuten, a global e-commerce and online services company, faced a data breach due to insider wrongdoing. The incident involved unauthorized access to sensitive information, including names and Social Security Numbers. While the breach was discovered on the same day it occurred, it highlighted the importance of robust security measures and user vigilance in protecting personal data.

How many accounts were compromised?

The breach impacted data related to approximately 5,390 individuals.

What data was leaked?

The data exposed in the breach included names and Social Security Numbers.

How was Rakuten hacked?

An insider at Rakuten breached sensitive data by gaining unauthorized access to the information. The specific methods used by the wrongdoer to infiltrate the system remain unclear, as well as any additional measures taken by the company to prevent future breaches.

Rakuten's solution

In response to the data breach, Rakuten took several measures to enhance its security and prevent future incidents. These measures included employing security experts from the development stage of software and services, conducting regular education and testing for developers, and performing quality checks and vulnerability testing to prevent unauthorized access. Rakuten also established an information security management system based on various standards and certifications, monitored login status to detect unauthorized logins, and collaborated with cybersecurity experts to ensure the safety and security of their services. While the specifics of their response to this particular breach remain unclear, these ongoing security initiatives demonstrate Rakuten's commitment to protecting customer information.

How do I know if I was affected?

Rakuten notified the affected users about the breach. If you are a Rakuten customer and haven't received a notification, you can visit Have I Been Pwned to check if your credentials were affected.

What should affected users do?

In general, affected users should:

1. Change Your Password: Immediately update your password for the breached account. Make sure the new password is strong and unique, not previously used on any other platform.

2. Reset Passwords for Other Accounts: If you've used the same or similar passwords for other online accounts, reset those as well. This is crucial as attackers often try using stolen passwords on multiple sites.

3. Enable Two-Factor Authentication (2FA): Activate 2FA on the breached account and consider enabling this additional security feature on all other important online accounts to significantly reduce the risk of unauthorized access.

4. Monitor Your Accounts: Keep an eye on your accounts for any suspicious activity and report any unauthorized transactions or changes to the respective service providers.

For more specific help and instructions related to Rakuten's data breach, please contact Rakuten support directly.

Where can I go to learn more?

If you want to find more information on the Rakuten data breach, check out the following news articles:

• About Information Security | Rakuten Group, Inc.

• Office of the Maine AG: Consumer Protection: Privacy, Identity Theft and Data Security Breaches