> JapanHacked_
[Contained][Severity: Major][Web app exploit]

DHC: online shop intrusion

DHC said intruders entered its online shop and rewrote member data of 5,096 people; names, addresses and other data may have been viewed.

Disclosed

2026-10-30

Organizations involved

1

Leaked or at risk

5.1K

5,096

Downtime

Unknown

What happened

  1. DHC confirmed unauthorized access to its online shop by a third party. [1]

  2. It published the incident. [1]

Impact

Member data of 5,096 people was rewritten, covering up to 5,520 saved delivery addresses. There were 27 suspicious orders and 71 fake member registrations. [1]

Names, addresses, phone numbers, purchase histories and the last four card digits may have been viewed. No sign of data being taken out has been found. [1]

Response

DHC restored the rewritten member data, fixed the vulnerability and reported to the Personal Information Protection Commission. [1]

Timeline

  1. Detected 2026-10-28
  2. Disclosed 2026-10-30
  3. 2 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak][Fraud]
Entry point
Web app

Data exposed or at risk

[Name][Postal address][Phone number][Purchase history]

Services hit

Organizations involved

Sources

  1. [1][Official]当社オンラインショップへの不正アクセスに関するお詫びとお知らせDHC · 2026-10-30