Puroland Gets Hacked with Ransomware, 2 Million Club Records Potentially Leaked

Sanrio Puroland entrance
Picture: Unseen Japan (all rights reserved)
Sanrio Entertainment, which runs Puroland, says they've been the victim of a cyberattack - and customer information is at risk.

Sign up for our free newsletter to get a weekly update on our latest content and help keep us editorially independent.

Need a preview? See our archives

Are you a member of the Puroland Club? If so, bad news: your personal information may have just been leaked.

Sanrio Entertainment – whose parent company owns popular characters such as Hello Kitty, My Melody, and Kuromi – investigated what appeared to be a site outage this week, according to NTV. IT personnel discovered that the site had been hacked and infected with ransomware, a type of virus that takes control of critical systems and won’t relinquish it unless the victim pays the attacker.

Sanrio operates Puroland, the amusement park for Sanrio characters in the city of Tama, Tokyo. The reports say that, as part of the intrusion, the records of up to two million customers who subscribed to the Puroland Club and who purchased a yearly passport, as well as the information of employees and clients, may have been leaked. The information includes customers’ names and addresses.

As of this writing, the site for the Puroland Club Passport is still temporarily down. The Japanese version of puroland.jp is redirecting the Passport page to a page labeled /passport_temporary, and it carries a message saying that, “due to network trouble,” customers currently can’t buy theme park tickets or e-passports.

Sanrio says there’s no danger or risk to the parent company and that the intrusion is limited to Sanrio Entertainment’s systems. According to NHK, no financial data has been leaked either.

Sanrio Entertainment has apologized and vows to take steps to strengthen its security going forward.

Cyberattacks on Japanese companies aren’t uncommon. Last year, a ransomware attack on popular video site Niconico took the service down for two months.

Discuss this article with other UJ fans on our Bluesky account or Discord server!

Help keep us going

We’re an independent site that keeps our content free of intrusive ads. If you love what we do, help us do more with a donation to the Unseen Japan Journalism Fund in any amount.

What to read next

Sign up for our free newsletter to get a weekly update on our latest content and help keep us editorially independent.

Need a preview? See our archives

Before You Go...

Let’s stay in touch. Get our free newsletter to get a weekly update on our best stories (all human-generated, we promise). You’ll also help keep UJ independent of Google and the social media giants.

Want a preview? Read our archives.

Read our privacy policy