> JapanHacked_
[Contained][Severity: Critical][Web app exploit]

giftee: unauthorized access to its system and fraudulent e-gift issuance

On 26 October giftee Group said a third party had exploited a vulnerability in part of a system run by its subsidiary giftee Inc. on the 25th and used it to issue e-gifts fraudulently. No e-gifts held by users were used, and no harm to users' assets or personal data has been found. The access route has been closed and the system stopped for good. It expects a loss of about 550 million yen, to be booked as an extraordinary loss.

Disclosed

2026-10-26

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

Timeline

  1. Started, Detected 2026-10-25
  2. Disclosed 2026-10-26
  3. 1 days

Attack or cause

Method
[Web app exploit]
Impact
[Fraud][Financial loss]
Entry point
Web app

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]当社連結子会社における一部システムへの不正アクセスおよびeギフトの不正発行に関するお知らせgiftee Group · 2026-10-26
  2. [2][News]ギフティグループ、不正アクセスで5.5億円損失 eギフトが不正発行Nikkei · 2026-10-26