Good Smile Company: online shop breached, card skimmer may have taken full card details of 2,800 customers

Teaser from the source

Good Smile Company, the Japanese figure maker, says a third party accessed its official online shop between about 3pm on Oct 19 and 10pm on Oct 22 2026 (JST), and members' names, addresses, phone numbers, order details and card last four digits and expiry dates may have been viewed. The shop was closed while the vulnerability is fixed. In its Oct 29 third notice, Good Smile says attackers exploited a vulnerability to gain admin rights, and a malicious program sat on the credit card payment page from 1:55pm JST Oct 21 until 7am JST Oct 23, so 2,800 customers who used that page may have had their cardholder name, full 16-digit card number, expiry date and security code exposed; they were emailed individually. The last four digits and expiry dates of 402,466 previously registered cards may also have been exposed. Customers are warned about phishing emails, calls and SMS and should check card statements.

This is the RSS-feed teaser. Read the full article at the original source.