Mandarake: unauthorized access to its servers
At about 23:00 on 27 August, Mandarake, which sells second-hand manga and collectibles, found unauthorized access to its servers and shut down the affected servers. Names, addresses, phone numbers and emails given by customers who ordered online up to 06:00 on 28 August may have leaked. It does not hold card data, and says member passwords and buyback member data did not leak. It stopped its online store and postponed its big auction.
Disclosed
2026-08-30
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
Timeline
- Detected 2026-08-27
- Disclosed 2026-08-30
- 3 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak][Service outage]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Major]Tokyo, NakanoWholesale and retail trade
Mandarake Inc.
Sources
- [1][Official]不正アクセスによる個人情報漏えいの可能性、通販サイトのサービス停止および「大オークション大会」開催延期のお知らせとお詫びMandarake
- [2][News]まんだらけ、不正アクセスで個人情報漏えいの恐れ 通販サイト停止で「大オークション大会」も延期にITmedia NEWS · 2026-09-01