# The invoice amount came off the list

2026-10-16

Yamato says Kuroneko deferred-payment data left: about 5.26 million users, 50,000 destinations, 4,100 merchants. Cards and passwords are not in it. The invoice amount and staff names from the second notice did not leave.

Canonical: https://www.fabiocti.com/notes/the-invoice-amount-came-off-the-list/
Author: Fabio Correia

They took two fields back. The address stayed.

Yamato Transport said today that a third party took about 5.31 million rows from Kuroneko deferred payment. The big slice is about 5.26 million users who used the service between 1 October 2018 and 28 September 2026: name, address, phone, email, item line, quantity, unit price, application number. About 490,000 of those rows have an email. About 50,000 destination names, addresses, phones, and slip numbers from 5 February 2021. About 4,100 merchant names and codes from 1 October 2018. Cards are not in it. Passwords are not in it.

The second notice, on 2 October, had put invoice amounts, receivable balances, and staff names on the maybe list. Today’s look says those did not leave. They saw the access on 28 September and stopped the service that night. They published on the 29th. The service came back on 9 October.

## What 5.26 million will be asked to cover

It will be briefed as “Yamato lost every tracking number in Japan.” This is deferred payment, not the driver’s handheld. It will be briefed as a card file. The company does not hold the card here. A unit price next to a home address is already enough for a call that pretends to be a collection. It is not a finding that the invoice total left. They just took that sentence off the page.

If you used Kuroneko pay-later in the last eight years, wait for their mail. They say they have had “what is this SMS” calls and have not confirmed misuse of the file that left. Do not pay a stranger who already knows the item line. Phone-only Yamato that never touched deferred payment is a different box.

The amount came off the list. The street did not.