> JapanHacked_
[Contained][Severity: Critical][Web app exploit][Malware]

Ramrock: unauthorized access to the Mimamori CUBE shop puts about 5,400 personal records and 190 cards at risk

The Mimamori CUBE online shop of Ramrock was accessed without authorization, and about 5,400 personal records and 190 payment cards may have been stolen.

Disclosed

2026-08-25

Organizations involved

1

Leaked or at risk

5.4K

5,400

Downtime

Unknown

What happened

  1. Unauthorized access and a malicious program were found on the online shop, and the shop was stopped. [1] [2]

  2. The company disclosed the unauthorized access. [1] [2]

  3. Its investigation found that data could have been taken from to . [1] [2]

Impact

  • About 5,400 personal records, including ID documents and encrypted passwords [1] [2]
  • 190 credit cards, including security codes [1] [2]
  • There is no firm proof that the data left its systems. [1] [2]

Timeline

  1. Started 2025-05-14
  2. Detected 2026-08-07
  3. Disclosed 2026-08-25
  4. 468 days

Attack or cause

Method
[Web app exploit][Malware]
Impact
[Data leak][Service outage]
Entry point
Web app

Data exposed or at risk

[Name][Date of birth][Postal address][Phone number][E-mail address][Payment card][ID document image][Passwords]

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][News]「みまもりCUBE」ECサイトに不正アクセス、個人情報 約5,400件・カード情報190件に漏えいのおそれSecurity Measures Lab · 2026-10-30
  2. [2][News]株式会社ラムロック「みまもりCUBE」における不正アクセスによるお客様情報流出についてRakuten Card · 2026-10-29