TOKYO - Sanrio Entertainment Co., which operates the Hello Kitty theme park Sanrio Puroland, said Friday that up to 2 million records including personal information may have been leaked following unauthorized access from an external source.