Multiple Japanese consumer brands confirmed member/order leaks this week. Practical steps for SOC/IR and for users: (1) treat any email/SMS/LINE that cites real order fields (item, amount, address) and pushes refunds, password resets, or "verify account" as hostile until verified via the app/site you already trust; (2) force password resets + MFA for affected tenants and watch for credential stuffing on SSO; (3) for platforms that store merchant API keys (e.g. WASABI SWITCH), rotate those keys and restrict egress; (4) brief helpdesks that callers will know partial PII — knowledge of DOB/phone is not proof of identity.