JP — ITmedia

Good Smile Company Hit by Unauthorized Access; Official EC Site Closed, Member Addresses and Order History Possibly Leaked, No Reopening Date Set

SecurityOctober 26, 20261 min read

Good Smile Company, a Japanese maker of figures, says hackers got into its official online shop and may have viewed customer personal data. The shop is closed, and no reopening date has been set.

What happened

Good Smile Company said on October 23 that someone broke into its online shop, the "Good Smile Company Official Shop." People outside the company may have looked at members' personal information. The company has shut the site down for now and has not said when it will reopen.

Key facts

The unauthorized access happened between about 3 p.m. on October 19 and about 10 p.m. on October 22.
The company found the problem by checking its system logs.
Data that may have been viewed includes names, gender, addresses, phone numbers, email addresses, order dates, product names, quantities, prices, delivery details, and payment methods.
For credit cards, the card brand, the last four digits, and the expiry date may have been viewed.
Full card numbers, card holder names, and security codes were not included, the company says.

How the attack likely worked

The company thinks attackers used a weakness in its system, called a vulnerability. It has fixed the weaknesses it already found and reported the case to Japan's Personal Information Protection Commission, the government body that watches over how companies handle personal data.

Why it matters

Fans who buy figures from the shop could have their personal details and order history exposed. Scammers can use this kind of information to send fake emails, calls, or text messages. The company asks customers to be careful with any message that seems strange and to watch for people pretending to be someone they trust.

What to watch

Whether the company finds more affected members and emails them.
When and how the online shop will reopen.
Any new details about how the attackers got in.

Glossary

Good Smile Company: A Japanese company that plans and sells figures, such as collectible toy models.
Personal Information Protection Commission: A Japanese government group that checks how companies protect personal data.

Nomura Research Institute launches service to support proactive system shutdowns during cyberattacks

Nomura Research Institute (NRI) and its subsidiary NRI Secure Technologies began offering "Cyber Resilience Management Support" on October 22, helping companies hit by cyberattacks decide when to proactively halt and resume systems. The service includes setting shutdown and restart criteria and decision-making flows, estimating financial costs and assessing harder-to-quantify risks such as brand damage. Support takes about two to three months at minimum and runs in four stages.

Security전자신문Oct 26

Editorial: Information Security Also Needs an Insurance Safety Net

Following a string of personal data leaks and AI-driven hacking attacks, Korea's cyber insurance market remains very small, at roughly 60–65 billion won a year according to industry estimates. The editorial argues that most companies carry only the legally mandated minimum of 1 billion won in coverage, leaving affected citizens without an adequate safety net, and it calls on businesses to invest in cyber insurance and on policymakers to strengthen compensation systems.

SecurityThe RegisterOct 26

Work to protect DNS from quantum decryption attacks is speeding up

ICANN's CTO John Crain told The Register that internet governance bodies are likely to accelerate work to make the DNS quantum safe, because predictions suggest capable quantum computers could arrive around the turn of the decade. He said that larger DNSSEC keys would create larger packets and may force a shift from single UDP messages to multiple TCP packets, a transition he expects will take a few years.