Good Smile Company online store breach may have exposed customer card data
Attackers exploited a vulnerability in Good Smile Company's official online store to seize administrator privileges and inject malicious code into the card payment page. It was found that the cardholder names, full card numbers, expiration dates and security codes of about 2,800 customers, as well as the last four digits and expiration dates of 402,466 separately registered cards and some order information, may have been exposed. The store suspended operations, and the company asked customers to contact their card issuers.
Key facts
- Affected organization
- Good Smile Company
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Possible leak of full card data of about 2,800 customers and partial data of 402,466 registered cards
- Cause / method
- Exploitation of a store vulnerability to seize administrator privileges and inject malicious code into the payment page
- Location
- Japan
If your data was exposed
Exposed dataNameCard detailsUsage & purchase history
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
- Turn on payment alerts in your card issuer’s app, and if you see a charge you don’t recognize, ask the issuer to block and reissue the card.
Timeline
- Good Smile Company announced the breach of its online store and the possible leak of full card data of about 2,800 customers.
- The suspension of the store and the possible exposure of partial data of 402,466 registered cards were reported, and the company asked customers to contact their card issuers.
- It was reported that some order information was also within the range of possible exposure.
7 related reports
- Good Smile Company Announces Data Breach of Online Store
- Good Smile Company reports potential leak of full credit card information of 2,800 customers in major data breach
- Good Smile Company Data Breach: Malicious Code on the Online Store's Card Page Put Full Card Details of 2,800 Customers at Risk
- 無印良品で約2700万件の会員情報流出か 松屋では238万件…グッドスマイルカンパニーはセキュリティコードなど含むカード情報流出の可能性
- 日本公仔業者Good Smile Company遭駭,逾40萬張信用卡部分資料恐外洩,臺灣顧客也可能受影響
- ECサイトに不正アクセス、会員情報流出 - フィギュアメーカー
- Good Smile Official Shop Breach: Card Data, What to Do
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.