OSIRO: up to 12,661 member IDs and display names on the community platform were viewed from outside

On 19 October a security check by OSIRO Inc. found that some member data on OSIRO could be viewed without logging in, and it fixed the system. On 28 October it matched access logs and confirmed that outsiders had actually accessed the data. The cause lies in its own system, not in community operators’ settings. It has reported to the privacy regulator. [1]

Up to 12,661 members registered or active between 17 December 2021 and 3 October 2026 are affected; their member IDs, display names and icon image URLs were viewed. 1,101 display names may be real names. The company says names, addresses, emails, phones, birth dates, passwords and card numbers were not accessed. [1]