Tenga breach exposes customer data for approximately 600 users

Tenga, a sex toy manufacturer founded in Japan and headquartered in Tokyo, notified customers of a data breach on Friday. The incident originated from Tenga Store USA, the company’s division in the United States. According to the company, an unauthorized party gained access to the professional email account of one of its employees, which allowed a hacker to access the employee’s inbox. The hacker potentially stole customer information, including customer names, email addresses, and historical email correspondence, which may include order details or customer service inquiries.

A Tenga spokesperson later stated that the breach affected approximately 600 people in the United States, based on a forensic review. Because of the nature of the products, order details and customer service inquiries are likely to include intimate information. Tenga, which has shipped over 162 million products worldwide, is the latest in a series of adult-industry companies to face security incidents. Other previously hacked entities in the sector include sex toy maker Lovense, as well as adult websites Pornhub and SexPanther. The details of the security incident were first published on February 13.

Following the incident, Tenga implemented several security measures. The company reset the affected employee’s credentials and enabled multi-factor authentication—a security feature requiring multiple forms of verification—across its systems to prevent future unauthorized access. The company spokesperson did not state whether multi-factor authentication was active on the email account prior to the breach. Tenga also recommended that customers change their passwords, although it did not state that customer passwords were compromised. Additionally, the company advised users to remain vigilant against suspicious emails, particularly those appearing to come from the specific employee whose account was breached. To address the impact, a Tenga spokesperson stated, “We have already proactively contacted those who may have been impacted to ensure their safety and provide guidance.”

Why it matters

The breach of a sex toy manufacturer highlights the privacy risks associated with intimate consumer data, with the company confirming that order details and customer service inquiries were potentially exposed.