giftee: unauthorized access to its system and fraudulent e-gift issuance
On 26 October giftee Group said a third party had exploited a vulnerability in part of a system run by its subsidiary giftee Inc. on the 25th and used it to issue e-gifts fraudulently. No e-gifts held by users were used, and no harm to users' assets or personal data has been found. The access route has been closed and the system stopped for good. It expects a loss of about 550 million yen, to be booked as an extraordinary loss.
Disclosed
2026-10-26
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
Timeline
- Started, Detected 2026-10-25
- Disclosed 2026-10-26
- 1 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Fraud][Financial loss]
- Entry point
- Web app
Data exposed or at risk
–
Organizations involved
[Breached][Critical]Tokyo, ShinagawaInformation and communications
giftee Inc.
Sources
- [1][Official]当社連結子会社における一部システムへの不正アクセスおよびeギフトの不正発行に関するお知らせgiftee Group · 2026-10-26
- [2][News]ギフティグループ、不正アクセスで5.5億円損失 eギフトが不正発行Nikkei · 2026-10-26