Three hundred and forty-five thousand was a PAN

Twenty-seven million was not supposed to have a card. Some of it did.

Ryohin Keikaku’s second letter, today, says the 30 October app file also covers net-store members who never used the app, and that some of those rows have name, address and phone. Separately: Credit Saison MUJI Cards, and cards registered on the app or the store, may have been reached. About 1.09 million card-related records. About 345,000 of those, Kyodo’s reading of the letter, are currently valid full numbers plus date of birth — leftover because until July 2021 the company kept the PAN and the MUJI Card ID to hand out its own perk. The perk ended. The numbers stayed.

The 27.26 million is still the mail, birthday and gender ceiling. Do not add 1.09 million people on top of it. Some of the card rows sit inside the first file. No dark-web dump confirmed. The app and the store, it says, still run. Saison is watching the book.

A mail that already knows the birthday and asks you to read the rest of the number back is not them. They will not ask.

What 345,000 will be asked to cover

It will be briefed as 27 million cards. Twenty-seven million is still mostly an email. Three hundred and forty-five thousand is a live PAN plus a birthday, from a perk file that should have been deleted. It will be briefed as every Saison card in Japan. It is the MUJI slice they kept.

If you had a MUJI Card, or stored a card on the app or the store, wait for their letter or Saison’s. The first notice’s “no cards” sentence is withdrawn. Keep that in the same paragraph as the 345,000.

Three hundred and forty-five thousand was a PAN. The perk ended five years ago. The file did not.