The well-known Japanese brand Tenga, specializing in adult toys primarily designed for men, recently disclosed a security incident that compromised the personal information of some customers. Hackers accessed an employee’s business email account, gaining entry to sensitive details. Notifications went out to affected individuals in the United States at the start of February 2026. Around 600 people received these alerts following a forensic review by the company. The breach stemmed from unauthorized access discovered on February 12, 2026.
In the notification letter from Tenga Store USA, the company explained that the intruder viewed customer names, email addresses, and order histories along with related correspondence. No passwords, credit card details, or other highly sensitive financial information fell into the wrong hands. The hacker went further by sending spam emails from the compromised account, specifically from [email protected] between midnight and 1 a.m. Pacific Time on February 12 and 13. Customers got instructions to delete any suspicious messages without interacting and to stay alert for phishing attempts disguised as legitimate communications from the brand.
Tenga acted swiftly once the issue came to light. They reset the password on the affected email account right away and rolled out multi-factor authentication across their entire system to prevent similar intrusions. Founded in Tokyo in 2005, the company has shipped more than 162 million products globally, building a reputation for innovative and discreet designs. While the incident remained limited to a specific customer service channel in the US, with global databases staying secure, it still highlights vulnerabilities in everyday business tools like email.
This kind of breach often begins with something as simple as a phishing email tricking an employee, opening the door to broader access. For those shopping in this category, the exposure of order details can feel particularly invasive since preferences tend to stay very private. Tenga emphasized transparency in their communications and encouraged everyone, even those not directly affected, to update passwords if they reuse credentials elsewhere. Experts note that enabling two-factor authentication and monitoring accounts for odd activity remains one of the best defenses against follow-up risks.
The relatively contained scale of this event, impacting far fewer people than many high-profile corporate breaches, does not diminish its importance. It serves as a stark reminder for all online retailers handling personal data to prioritize email security. Tenga continues to focus on product quality and customer discretion while reinforcing their protections. Anyone who has shopped through their US store should double-check their inbox and accounts for anything unusual as a prudent step.
What steps do you take to safeguard your personal information when buying intimate products online, and have you ever dealt with a similar breach in the comments.
