Four million was a login ID

Four million is a login. The name is not in it.

Hana-Cupid’s 28 October notice — still the letter this morning — says the internet shop and the business shop were reached on 14–15 October and that a member take was confirmed on the 19th. 4,238,242 rows that might be in it: user ID, a password stored so it cannot be reversed, the PC email, the mobile email. Name, gender, date of birth, address, phone, card, company, desk, the delivery address: out. They do not keep cards on that box.

The room is people who registered an email on the official EC. Marketplace orders, phone orders, and the florist-shop counter are out, even if they bought flowers. Leavers can still be in the 4.2 million. They started mailing the list on the 28th. Anyone they cannot reach is notified by the page. No secondary use confirmed.

What 4,238,242 will be asked to cover

It will be briefed as every Japanese flower address, and as a password dump. It is a login ID plus two mails plus a hash they say does not reverse. It will be briefed as 4.2 million cards. They do not hold them. Do not add Joshin’s 6 million maybe, or So-net’s 2.58 million, to this ID list. Different shops. Different files.

If you registered on i879.com, the emails are exposed. The hash is not a reason to wait on reuse: change the password you also used somewhere else. A mail that already knows the user ID and asks for the delivery address is not their letter. They will not ask for a card.

Four million is a login ID. Keep the word name out of the sentence until they put one in.