Weblife: unauthorized access to the customer management system of its OEM website-building service may have leaked data of up to 7,425 people

An access-control flaw in Weblife's OEM website-building service was abused; data of up to 7,425 people may have leaked, and some data was altered.

Disclosed

2026-08-18

Organizations involved

Leaked or at risk

7.4K

7,425

Downtime

Unknown

What happened

2026-08-17
Its monitoring detected unusual access and it began an investigation. A third party had accessed the system from August 14 to 17, some customer data was altered, and data of contracting companies and individuals may have leaked. [1] [2]
2026-08-18
It announced the unauthorized access. The scope was up to 7,425 people using the service through OEM partners; its direct-sale "BiNDup" was not affected. No leak of passwords or card data was found. [1] [2]
2026-08-28
A follow-up confirmed that names, addresses, phone numbers, sex, occupations and birth dates did not leak, and said email addresses and some management data may still have leaked. The access-control flaw is fixed. [1]

[Breached][Moderate]Tokyo, MinatoInformation and communications7,425 leaked
Weblife Inc.
A flaw in the access control of the customer management system used through OEM partners let customer data be viewed and altered. A follow-up narrowed the data that may have leaked to email addresses and some management data.

						Note
Weblife Inc.	[Breached]	[Moderate]	Tokyo, Minato	Information and communications	7,425	A flaw in the access control of the customer management system used through OEM partners let customer data be viewed and altered. A follow-up narrowed the data that may have leaked to email addresses and some management data.