TENGA USA INC has notified individuals that an unauthorized party gained access to the professional email account of one of its employees. According to the company’s notice, the intrusion was discovered on February 13, 2026, and between 12am and 1am PT that day, the unauthorized party used the compromised account to send unsolicited spam emails to contacts found in the account’s history. This falls under hacking or system intrusion, meaning someone outside the company broke into an employee’s account rather than gaining access through a lost device or an insider’s own actions.
If you’re reading this because you received a notice, it likely means you were a contact in that employee’s email inbox — possibly from a past order or a customer service exchange with TENGA USA. The company says the incident did not involve Social Security numbers or billing information such as credit or debit card details.
What information was exposed?
- Full name
- Email address
- Historical email correspondence, which may include order details or customer service inquiries
TENGA USA states it has not offered free credit monitoring or identity protection services in connection with this incident, as the exposed information did not include Social Security numbers or financial account data.
What should you do now?
- Do not click links or open attachments in any email that appears to come from Hayato Iizuka ([email protected]) dated between February 12 and February 13, 2026 — delete these messages if you find them.
- Be cautious of follow-up phishing attempts that may reference your past order or customer service history with TENGA, since that information may have been visible to the attacker.
- If you reused your email password on other accounts, change those passwords now, especially anywhere you used the same login as your email.
- Watch your inbox for unusual activity, such as password reset emails you didn’t request, and enable two-factor authentication on your email account if you haven’t already.
- Since your name and email address were involved, consider signing up for a service like Aura or LifeLock, which can alert you if your information appears elsewhere or shows up in future spam and phishing campaigns.
- Stay alert for scam emails in general — reviewing a guide like this breakdown of another recent breach notice can help you recognize similar warning signs.