Good Smile Company: unauthorized access to the Official Shop

On 23 October figure maker Good Smile Company said a third party had viewed admin data of its Good Smile Company Official Shop online store. Logs show repeated access from just after 15:00 on 19 October until about 22:00 on 22 October, which it attributes to a vulnerability. Members' names with readings, gender, addresses, phone numbers, email addresses and order details may be affected, along with card brand, last four digits and expiry date, but not full card numbers or security codes. The shop is closed, no count has been given, and the company reported the case to the Personal Information Protection Commission. An update on 26 October said it learned of the breach from its development and maintenance contractor on the morning of the 23rd and that the cause was not the PHP vulnerability. Payment data of orders paid with Amazon Pay or PayPal and separate systems such as its Rakuten store are not affected. All members, including former ones, will be notified by email.