---
title: Japan's and ST HD says a server intrusion may have exposed about 2.5 million customer records | ctxsec
url: https://ctxsec.com/items/and-st-hd-2-5m-customer-records-server-access
description: ""
status: "confirmed (and ST HD timely disclosure, Oct 23, via Japan IR); scope still under investigation"
published: 2026-10-23
---

> 

[← Cybersecurity News](/news) · [markdown](/items/and-st-hd-2-5m-customer-records-server-access.md)

confirmed (and ST HD timely disclosure, Oct 23, via Japan IR); scope still under investigation

2026-10-23

### Japan's and ST HD says a server intrusion may have exposed about 2.5 million customer records

and ST HD (TSE 2685) disclosed on **Oct 23** that a third party accessed its operational servers and that customer, business-partner and employee information may have leaked. It puts the potential exposure at about **2.5 million customer records** and about 10,000 business-partner records, with employee data still being scoped. Payment card data is not affected, the web store was not affected, and member-point use is temporarily suspended. The company isolated the servers, blocked the access route, and reported to police and Japan's Personal Information Protection Commission.

Sources: [and ST HD disclosure (Japan IR, Oct 23)](https://japanir.jp/en/company/company-2685/ir/2685-20261023-01_wp_disclosure_update/)