> JapanHacked_
[Contained][Severity: Critical][Web app exploit]

BEENOS: unauthorized access to the Sekaimon overseas shopping service

On 10 February, Shop Airline, a BEENOS subsidiary, detected unauthorized access to its server and to data in the database of its Sekaimon overseas shopping service, and stopped the service that evening. Names, birth dates, genders, emails, phone numbers, addresses, the last four digits and expiry of cards, and hashed passwords of members since December 2007 may be affected. The vulnerable path was closed on 13 February. New orders across all supported countries and returns resumed on April 23 after password resets and deletion of stored payment-related information. The Sekaimon Yahoo Auctions shop remained suspended at that time.

Disclosed

2026-02-13

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

Timeline

  1. Detected 2026-02-10
  2. Disclosed 2026-02-13
  3. 3 days

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][Official]「セカイモン」への不正アクセスに関するお知らせとお詫びBEENOS · 2026-02-13
  2. [2][Official]「セカイモン」サービス再開のお知らせとお詫びBEENOS · 2026-04-23