> JapanHacked_
[Contained][Severity: Major][Web app exploit][Malware]

Daiko Printing: a card-stealing program sat on the PhotoGoods checkout page for about five weeks, so card numbers and security codes may have leaked

A card-stealing program on the checkout page of Daiko Printing's PhotoGoods custom-card service, including Calbee baseball cards, may have leaked card numbers and security codes.

Disclosed

2026-09-16

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. A program that captures card details typed on the checkout page was installed and began running. [1]

  2. It was told that a suspicious external program was being loaded, started an investigation and removed the program. [1]

  3. It announced the unauthorized access and suspended the service. [1] [2]

Impact

Data that may have leaked: card numbers, expiry dates, security codes, names, addresses, phone numbers, email addresses and member passwords converted into an irreversible form. The card data covers people who typed card details on the checkout page from August 6 to September 11, even without completing a purchase. [1]

The number of people and the actual extent were under investigation, and it will not reopen the service until it is confirmed safe. [1]

Timeline

  1. Started 2026-08-06
  2. Detected 2026-09-11
  3. Disclosed 2026-09-16
  4. 41 days

Attack or cause

Method
[Web app exploit][Malware]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Name][Postal address][Phone number][E-mail address][Payment card][Passwords]

Organizations involved

  • [Breached][Major]Osaka, Osaka, Minato WardManufacturing

    Daiko Printing Inc.

    A vulnerability and the file-upload function of the PhotoGoods system were abused to place a card-stealing program on the checkout page. The number of people affected was still under investigation.

Open in organization search

Sources

  1. [1][Official]【重要なお知らせ】「PhotoGoods」への不正アクセスによる個人情報等の漏えい可能性に関するお詫びとお知らせDaiko Printing Inc. · 2026-09-16
  2. [2][News]「PhotoGoods」に不正アクセス、カード情報が漏えいした可能性ScanNetSecurity · 2026-10-06 08:05