> JapanHacked_
[Contained][Severity: Major][Credential abuse]

Fuji-Q Highland: unauthorized logins to its app and member site

Between 4 and 7 September, a credential stuffing attack using email and password lists obtained elsewhere logged in to 159 member accounts on Fuji-Q Highland's official app and CLUB Fuji-Q member site. Names, emails, birth dates, genders, phone numbers, postal codes, prefectures and member numbers may have been viewed; for some members, purchase history, part of the card details (partial number, expiry date and cardholder name) and ticket data too. The passwords of those accounts were reset.

Disclosed

2026-10-20

Organizations involved

1

Leaked or at risk

159

159

Downtime

Unknown

Timeline

  1. Started 2026-09-04
  2. Disclosed 2026-10-20
  3. 46 days

Attack or cause

Method
[Credential abuse]
Impact
[Data leak]
Entry point
Stolen credentials

Data exposed or at risk

[Name][E-mail address][Date of birth][Gender][Phone number][Purchase history][Payment card][Postal address]

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][Official]富士急ハイランド公式アプリ・会員サイト（CLUB フジQ）への不正ログインに関するお詫びとお知らせFuji-Q Highland · 2026-10-20