Are you a member of the Puroland Club? If so, bad news: your personal information may have just been leaked.
Sanrio Entertainment – whose parent company owns popular characters such as Hello Kitty, My Melody, and Kuromi – investigated what appeared to be a site outage this week, according to NTV. IT personnel discovered that the site had been hacked and infected with ransomware, a type of virus that takes control of critical systems and won’t relinquish it unless the victim pays the attacker.
Sanrio operates Puroland, the amusement park for Sanrio characters in the city of Tama, Tokyo. The reports say that, as part of the intrusion, the records of up to two million customers who subscribed to the Puroland Club and who purchased a yearly passport, as well as the information of employees and clients, may have been leaked. The information includes customers’ names and addresses.
As of this writing, the site for the Puroland Club Passport is still temporarily down. The Japanese version of puroland.jp is redirecting the Passport page to a page labeled /passport_temporary, and it carries a message saying that, “due to network trouble,” customers currently can’t buy theme park tickets or e-passports.

Sanrio says there’s no danger or risk to the parent company and that the intrusion is limited to Sanrio Entertainment’s systems. According to NHK, no financial data has been leaked either.
"Noah [at Unseen Japan] put together an itinerary that didn’t lock us in and we could travel at our own pace. In Tokyo, he guided us personally on a walking tour. Overall, he made our Japan trip an experience not to forget." - Kate and Simon S., Australia
Sanrio Entertainment has apologized and vows to take steps to strengthen its security going forward.
Cyberattacks on Japanese companies aren’t uncommon. Last year, a ransomware attack on popular video site Niconico took the service down for two months.
Get More UJ
What to read next

The library, reopened to fanfare in 2022, continues to bring in more visitors every year than people who live in the prefecture.

Japan’s anime and manga industries are growing wary of the impact of GenAI on their bottom line – but don’t have any good solutions.

Officials are worried about the environmental impact after tourists dumped 18,000 coins into the ponds in 2025, despite clearly posted signs.