RIZAP: unauthorized access to the APORITO online store
On 10 August, RIZAP said its sports and outdoor goods store APORITO Online Store was accessed by a third party who planted a malicious script in the system. It found a suspicious program sending data out on 5 August and closed the site from 15:30 that day. Names, addresses, phone numbers, emails, card numbers, expiry dates and security codes of users who ordered or entered data from 1 May to 5 August may have leaked.
Disclosed
2026-08-10
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
Timeline
- Detected 2026-08-05
- Disclosed 2026-08-10
- 5 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak][Service outage]
- Entry point
- Web app
Data exposed or at risk
Services hit
Organizations involved
[Breached][Critical]Tokyo, ShinjukuPersonal services and entertainment
RIZAP Co., Ltd.
Sources
- [1][News]RIZAP運営のECサイトに不正アクセス カード情報含む個人情報が流出の可能性 サイトは一時閉鎖ITmedia NEWS · 2026-08-12