Yellow Hat said unauthorized access to its servers may have exposed 1,801,499 customer records. The affected information includes member names, phone numbers, email addresses and membership numbers, but not credit card information, passwords or vehicle information. The company detected the intrusion on the 18th, suspended its Yellow Hat WEB Service Reservation System, investigated the incident and strengthened security before restoring the system. The attack is believed to have involved malicious software targeting the reservation service. No secondary damage has been confirmed, although exposed contact details could be used in phishing scams or spam campaigns. Yellow Hat has opened a dedicated hotline, is reporting to Japan's Personal Information Protection Commission and is consulting with police. The incident follows an April disclosure by subsidiary 2rinkan Yellow Hat of unauthorized access involving approximately 3.18 million customer records, increasing pressure for a group-wide review of information security.