> JapanHacked_
[Contained][Severity: Critical][Web app exploit]

Fukuyoshi: card data at its online shop may have been exposed

Investigation following a July 2024 police warning found payment-application tampering through an old-site vulnerability. In October 2025 the company disclosed possible leakage and misuse involving 12,630 card entries for purchases from March 31, 2021 to August 9, 2024. The old site was closed on August 20, 2024 and replaced.

Disclosed

2025-10-20

Organizations involved

1

Leaked or at risk

12.6K

12,630

Downtime

Unknown

Timeline

  1. Detected 2024-07-16
  2. Disclosed 2025-10-20
  3. 461 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak][Service outage]
Entry point
Web app

Data exposed or at risk

[Name][Payment card][E-mail address][Passwords][Phone number]

Organizations involved

Open in organization search

Sources

  1. [1][Official]フクヨシショッピングサイトへの不正アクセスによる個人情報漏えいに関するお詫びとお知らせFukuyoshi Inc. · 2025-10-20