External authentication service breach may have exposed giftee member data
A breach of prismatix, an external service used for member management and login authentication, was found to have potentially exposed giftee member data. The potentially exposed information included email addresses and some password information. giftee suspended its main functions on the night of 11 November and is investigating the extent of the incident.
Key facts
- Affected organisation
- giftee
- Incident type
- Data breach
- Occurred / detected
- 2026-11-11
- Scale of damage
- Possible exposure of members’ email addresses, some password information and other data
- Cause / method
- Breach of prismatix, an external service used for member management and login authentication
- Location
- Japan
If your data was exposed
Exposed dataEmailPassword
- Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- giftee suspended its main functions during the night.
- An announcement reported the possible exposure of member data following an external service breach and an ongoing investigation into the extent of the incident.
1 related reports
Other incidents at giftee
Repeated unauthorised access costs giftee group ¥550 million in electronic gift vouchers
Impact: ¥550 million in losses related to electronic gift vouchers
Repeated incidents of unauthorised access at the giftee group resulted in losses of ¥550 million related to electronic gift vouchers. Baskin-Robbins was also affected.
Read on 日経クロステック ↗
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.