Goods: unauthorized access to its former online shop may have exposed data of about 19,000 members
The server of Goods' former online shop was accessed without authorization, and personal data of about 19,000 members and of non-member buyers may have leaked.
Disclosed
2026-10-29
Organizations involved
1
Leaked or at risk
19K
19,000
Downtime
Unknown
What happened
A check by its server administrator found a malicious program on the old site's server and traces of an attack that tried to obtain customer data. [1]
The old site was stopped and outside access blocked. [1]
Instead of reopening the old site, the company launched a new online shop. [1]
The company disclosed the incident and began emailing affected customers. [1]
Impact
Group | People |
|---|---|
Members of the old site | About 19,000 |
Customers who ordered without registering | Under investigation |
The total number of people is not known yet. Data are names and their readings, addresses, phone and fax numbers, emails, gender, occupation, birth dates, purchase history and passwords stored in converted form. It holds no card data. Whether data was actually taken cannot be determined because logs are limited. [1]
Response
What users should do
If you use the same email address and password elsewhere, change that password. [1]
Timeline
- Detected 2026-10-22
- Disclosed 2026-10-29
- 7 days
Attack or cause
- Method
- [Unknown]
- Impact
- [Data leak][Service outage]
- Entry point
- Unknown
Data exposed or at risk
Services hit
Organizations involved
[Breached][Major]Osaka, ToyonakaWholesale and retail trade19,000 leaked
Goods Co., Ltd.
Sources
- [1][Official]当社旧通販サイトへの不正アクセスによる個人情報漏えいの可能性に関するお詫びとお知らせGoods · 2026-10-29