Sex toys maker Tenga says hacker stole customer information

Source: TechCrunch

Data breach overview

Sex toy maker Tenga notified customers of a data breach on Friday, according to an email obtained by TechCrunch.

The Japanese company said an “unauthorized party gained access to the professional email account of one of our employees,” giving the hacker access to the employee’s inbox. This potentially allowed the hacker to see and steal customer names, email addresses, and historical email correspondence, which may include order details or customer‑service inquiries.

The hacker also sent spam emails to the hacked employee’s contacts, including customers.

Impact

• Approximately 600 people in the United States were affected, based on a forensic review.
• Order details and customer‑service inquiries may contain intimate information that many customers would not want disclosed.
• Tenga did not indicate that customer passwords were compromised, but recommended that customers change their passwords and remain vigilant for suspicious emails, especially those appearing to come from the breached employee.

Tenga’s response

• Reset the hacked employee’s credentials.
• Enable multi‑factor authentication (MFA) across its systems – a security feature that prevents access with stolen passwords.
• Proactively contact potentially impacted customers to provide guidance and ensure their safety.

The company did not disclose whether MFA was already enabled on the compromised email account before the breach.

Company background

• Founded in 2005 in Japan; headquartered in Tokyo.
• Sells a variety of sex toys, primarily for men.
• Claims to have shipped over 162 million products worldwide.

It is unclear whether the breach affected customers outside the United States, as the notification came from Tenga Store USA.

Related incidents

• Lovense (2025): leaked users’ email addresses and exposed accounts to takeovers.
• Pornhub (2025): hacking group claimed extortion after stealing users’ viewing data.
• SexPanther (2020): data exposure of a sexting site.

Publication details

First published on February 13. Updated with comment from Tenga spokesperson.