EPARK Relax & Esthe, PeakManager May Have Leaked 33 Million Records

2026-08-04

Leak disclosed in booking platform

EPARK Relax & Esthe, which operates booking sites for beauty salons and other businesses, said about 33 million pieces of personal information stored on its reservation management platform may have been leaked. Names, addresses and encrypted passwords may have been exposed.

Leak may involve up to 33 million records

The exact number is still under review, but the scale could rival KDDI, which said more than 14 million personal records may have been leaked, Sompo Japan with more than 17 million, and Benesse Corp, which discovered a leak of 28.95 million personal records in 2014.

Names, addresses among data at risk

The platform confirmed to have been potentially breached was the reservation management system 'PeakManager' provided by the company. It is a dedicated system for beauty salons, chiropractic clinics, acupuncture clinics and similar businesses, and can store customer information and visit histories.

The personal information that may have been leaked includes names, dates of birth and passwords used to access registrants' personal pages, as well as gender, addresses, phone numbers and email addresses. It does not include customers' credit card information or data related to My Number, the national identification system, the company said.

Unauthorized access confirmed on July 27

The company confirmed on July 27 that unauthorized access had been made to some PeakManager databases and that customer information in the databases had been deleted. By July 31, it had completed steps including suspending the database access account that was used without authorization.

The company is investigating the cause of the leak in cooperation with outside specialists. It said it will announce further progress on its official website as soon as it becomes clear.

Enjoyed this article? Share it with your network!