> JapanHacked_
[Contained][Severity: Critical][Web app exploit]

C-Connect: the payment application of its online shop "Ink Kakumei" was tampered with, and card information of 24,166 customers may have leaked

The payment application of C-Connect's shop "Ink Kakumei" was tampered with through a vulnerability, and card data of 24,166 customers may have leaked.

Disclosed

2026-07-29

Organizations involved

1

Leaked or at risk

24.2K

24,166

Downtime

Unknown

What happened

  1. Some credit card companies told it of concerns about the card data of customers who had used "Ink Kakumei". [1]

  2. It stopped card payments on the site and began an investigation by a third-party body. [1]

  3. It announced the findings. A vulnerability in part of the site's system was used to tamper with the payment application, so a leak of card data cannot be ruled out, and some customers' cards may have been misused. The scope was reported as 24,166 people. [1]

Timeline

  1. Detected 2025-12-09
  2. Disclosed 2026-07-29
  3. 232 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak][Fraud]
Entry point
Web app

Data exposed or at risk

[Payment card]

Organizations involved

  • [Breached][Critical]Tokyo, ChiyodaWholesale and retail trade24,166 leaked

    C-Connect Corporation

    A vulnerability in the site was used to tamper with the payment application; customers' card data may have leaked, and misuse was suspected for some customers.

Open in organization search

Sources

  1. [1][News]「インク革命」に不正アクセス、24,166名のカード情報が漏えいした可能性ScanNetSecurity · 2026-08-18 08:05