> JapanHacked_
[Contained][Severity: Major][Unknown]

Goods: unauthorized access to its former online shop may have exposed data of about 19,000 members

The server of Goods' former online shop was accessed without authorization, and personal data of about 19,000 members and of non-member buyers may have leaked.

Disclosed

2026-10-29

Organizations involved

1

Leaked or at risk

19K

19,000

Downtime

Unknown

What happened

  1. A check by its server administrator found a malicious program on the old site's server and traces of an attack that tried to obtain customer data. [1]

  2. The old site was stopped and outside access blocked. [1]

  3. Instead of reopening the old site, the company launched a new online shop. [1]

  4. The company disclosed the incident and began emailing affected customers. [1]

Impact

Group
People
Members of the old site
About 19,000
Customers who ordered without registering
Under investigation
[1]

The total number of people is not known yet. Data are names and their readings, addresses, phone and fax numbers, emails, gender, occupation, birth dates, purchase history and passwords stored in converted form. It holds no card data. Whether data was actually taken cannot be determined because logs are limited. [1]

Response

The company reported to the Personal Information Protection Commission and consulted the Osaka Prefectural Police. The new site reuses neither the old program nor the old passwords and uses a code sent by email to log in. [1]

What users should do

If you use the same email address and password elsewhere, change that password. [1]

Timeline

  1. Detected 2026-10-22
  2. Disclosed 2026-10-29
  3. 7 days

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][Official]当社旧通販サイトへの不正アクセスによる個人情報漏えいの可能性に関するお詫びとお知らせGoods · 2026-10-29