Freight Links Japan: One'sCloset server breach puts customer and delivery data at risk

From about midnight on 2 November, an attacker accessed servers, ran a malicious program and searched, extracted, saved and compressed database data. The operator considers external exposure likely, but the actual scope/count remains undetermined. Names, contact and transaction data may be affected; card data was not stored. [1]

A complete rebuild began at 22:30 on 2 November; no new intrusion has been detected since. Compatibility/configuration problems following the defensive PHP 7-to-8 update caused errors on 3–4 November. Service was substantially more stable by the 5th, with remaining fixes and external investigation planned. The update does not establish PHP as the entry route. [1]

CINQUE STELLE reports possible exposure of purchaser/recipient names, delivery addresses and phones for online orders from 1 April 2024 to 2 November 2026. Inclusion of its actual data is not yet confirmed; email and cards were not stored in the system. It deleted historical data and awaits investigation findings. [2]