# Six million was still a maybe

2026-10-26

Joshin says a member database of up to about 6 million names, addresses, phones and member IDs may have been reached. Two licence images and one My Number card are the named rows. Cards are not held. The 6 million is not a confirmed take.

Canonical: https://www.fabiocti.com/notes/six-million-was-still-a-maybe/
Author: Fabio Correia

They put 6 million on a member table they have not finished counting out.

Joshin’s second notice, 26 October, says the network it cut on the 16th may have let three rooms leave. Member database: up to about 6 million rows of name, address, phone, member number. “Joshin no Subscription”: up to about 230,000 — member number, phone, a handwritten sign, login ID, the initial password, billing history, contract and device IDs, an activation code. A renovation-photo upload box: up to about 800. In that box, named: two driving-licence images, one My Number card, five account numbers. Those people have already been written to. Cards are not kept.

The 6 million is a ceiling of what sat on the server. It is not a confirmed export. The company said that twice. The first notice, 17 October, was an outage. This one is a field list. Stores, EC and delivery, it says, still run. Some services do not.

## What 6 million will be asked to cover

It will be briefed as every Joshin customer and every My Number in Osaka. It is a member book that may have left, plus two licences, one card, and five accounts in a photo folder. Adding the 230,000 does not make 6.23 million people. The same member can sit in two rooms.

If you have a Joshin card, treat the name, the street and the phone as exposed until they subtract. A mail that already knows the member number and asks for the rest of the My Number is not their letter. The two licences are not a reason to brief 6 million identity documents.

Six million is a maybe. Keep the word until they drop it.