Tenga, a renowned sex toy manufacturer, recently disclosed a data breach incident to its customers through an email obtained by TechCrunch.
The email revealed that an unauthorized individual managed to access an employee’s professional email account, granting them entry to the inbox content. This breach potentially exposed customer names, email addresses, and historical email communications, including order details and customer service inquiries.
Moreover, the hacker exploited the compromised account to send spam emails to the employee’s contacts, including customers, as stated in the communication sent to Tenga’s customers.
Despite being contacted for further details, Tenga did not provide information on the total number of affected customers. The company’s website boasts a global shipment of over 162 million products.
The breach raised concerns as customer information, including order specifics and service inquiries, may contain sensitive details that customers prefer to keep private due to the nature of the products involved.
In response to the breach, Tenga advised customers to change their passwords, emphasizing vigilance towards suspicious emails, particularly those originating from the compromised employee’s account.
Following the incident, Tenga implemented various security measures, such as resetting the compromised employee’s credentials and enabling multi-factor authentication across their systems to prevent unauthorized access.
Techcrunch event
Boston, MA
|
June 23, 2026
Established in 2005 in Japan, Tenga operates from its headquarters in Tokyo, specializing in the sale of various sex toys primarily designed for men. While the breach notification originated from Tenga Store USA, it remains unclear if customers outside the United States were impacted.
Joining the ranks of other compromised entities in the adult industry, Tenga’s breach adds to a series of cybersecurity incidents affecting sex toy manufacturers and adult websites, including Lovesense, Pornhub, and SexPanther in recent years.