Sarku Japan
ent_dcea3e9e7dbb0618b4fb4891
Disclosures
12
Leak Site · State AG · 9 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
29,239
nationwide · State AG ME
Leak-site claims
1
unverified actor claims
Identity resolution
- Canonical name
- Sarku Japan
- Normalized
- sarku japan— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- sarkujapan.com
- Corporate parent
- SAR HOLDINGS, INC.— as stated in the breach filing
Disclosure history (12)newest first
- GLOBALLeak Siteas victim2026-09-14
sarkujapan.com zoominfo.com/c/sarku-japan/33898946 SARKU Japan Japan's #1 independent service & wholesale network for foreign cars — founded 1993 in Chiba by Texan David J. Jones (in Japan since 1989) after seeing that owners of European/American cars in Japan were "orphans": parts take 6–8 weeks from Europe, service is scarce. SARKU built the full foreign-car infrastructure: 9 service centers (8 Kanto + Nagoya), a wholesale yard of ~4,000 imported cars (one of Japan's two largest), a parts warehouse of 30,000+ SKUs worth ¥700M+ (also one of Japan's two largest), plus procurement/export arms via US offices in Seattle (since 1997) and Florida — selling 20,000+ cars and serving 60,000+ active customers (~150 staff from 15 countries; ~120K monthly site visitors, 170K+ downloaded car-buying guides). Since 2018 it's owned by the Netherlands' Louwman Group (Europe's largest family-run dealer group, est. 1923). Motto: "Foreign cars. Japanese precision."
- New Hampshire State AGas victim2022-08-12
Sarku Japan filed a supplemental notice with the New Hampshire AG regarding a data event affecting 104 NH residents. Unauthorized access occurred between Jan 14 and Feb 6, 2022. Data included names, addresses, DOBs, and SSNs. Initial notice sent March 16, 2022; supplemental notice mailed Aug 8, 2022, to 7 additional residents. Kroll credit monitoring provided.
- California State AGas victim2022-08-08
Sarku Japan (d/b/a of Variable State Holding Company) disclosed that an unauthorized actor gained access to its systems between January 14, 2022, and February 6, 2022. The company discovered anomalous activity on February 6, 2022. Affected data includes names, addresses, dates of birth, and Social Security numbers. The company engaged third-party cybersecurity specialists and offered 12 months of identity monitoring through Kroll.
- Maine State AGas victim2022-08-08
Sarku Japan reported a data breach affecting 133 Maine residents. The breach, described as an external system breach (hacking), occurred on January 14, 2022, and was discovered on February 6, 2022. The compromised information included names and Social Security numbers. Sarku Japan provided written notification to affected individuals on March 16, 2022, and offered 12 months of credit monitoring, fraud consultation, and identity restoration services through Kroll.
- New Hampshire State AGas victim2022-03-21
Sarku Japan (SAR Holdings Inc.) notified the NH AG of unauthorized access to systems on Feb 6, 2022. 97 NH residents affected. Data: name, address, DOB, SSN. Notification sent March 16, 2022. Response: Kroll credit monitoring, security training.
- Washington State AGas victim2022-03-16
Sarku Japan (SAR Holdings Inc.) filed a supplemental notice with the Washington AG regarding unauthorized access to systems between Jan 14 and Feb 6, 2022. Discovered Feb 6, 2022. Impacted 741 Washington residents with name, address, DOB, and SSN. Investigation ongoing.
- Indiana State AGas victim2022-03-16
Sarku Japan reported a data breach to the Indiana Attorney General. The breach occurred on 2022-01-13 and was reported on 2022-03-16. 365 Indiana residents were affected. 28,298 individuals affected in total.
- California State AGas victim2022-03-16
Sarku Japan disclosed that an unauthorized actor gained access to certain systems between January 13 and February 6, 2022. The company discovered the incident on February 6, 2022. Affected data may include names, addresses, dates of birth, and Social Security numbers. The company offered 12 months of identity monitoring through Kroll.
- Massachusetts State AGas victim2022-03-16
Sarku Japan reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-03-16. 1,225 Massachusetts residents were affected. The report records the breach type as electronic.
- Maine State AGas victim2022-03-16
Sarku Japan, a restaurant chain, reported an external system breach (hacking) occurring on January 13, 2022, discovered on February 6, 2022. The incident compromised names and Social Security Numbers of 28,298 individuals, including 131 Maine residents. The company notified affected consumers in writing on March 16, 2022, and provided 12 months of credit monitoring and identity restoration services through Kroll.
- Oregon State AGas victim2022-03-16
Sarku Japan reported a data breach to the Oregon Attorney General. The breach was reported on 2022-03-16. The breach occurred during 1/13/2022 - 2/6/2022. The breach was discovered on 2/6/2022. 28,298 individuals were affected. Notice was sent on 3/16/2022.
- Illinois State AGas victim2022-01-01
SARKU JAPAN filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-191). The register records the breach as discovered on February 6, 2022. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.