EXPLORINEER
en

JP — ITmedia

Unauthorized Access Found at Operator of Geo and 2nd Street; Official Apps and Online Services Suspended for Maintenance

Security1 min read

Geo and Second Street, two Japanese secondhand shops, were hit by unauthorized access to their parent company's internal systems. The company shut down many apps and websites while it fixes and checks its systems.

What happened

Second Retailing, the company that runs the stores Geo and Second Street, said on October 17 that someone had broken into its internal systems. To prevent more harm, it turned off apps and web services for both brands from 9 p.m. that day. It is now doing system maintenance. It has not said when the services will come back.

Key facts

  • The unauthorized access was found on October 15.
  • Services were shut down from 9 p.m. on October 17.
  • Store opening hours have not changed.
  • In-store buying without the app is still open.
  • Scheduled home pickups for Second Street still happen on the set dates.

Which services are affected

At Second Street, the official app and online store are down. Store pickup orders, home pickup buying, and web requests for on-site buying are not available. Some orders placed before maintenance will still ship. At Geo, the official app, website, and online store are down, along with rental and home buying services. Geo Mobile's online store and mobile home buying are also stopped. Coin lockers, convenience store buying, and a home-delivery storage service called 2nd STORAGE are affected too.

Words to know

Unauthorized access means someone got into a computer system without permission. Companies often shut services down when this happens, so the attacker cannot cause more damage. The company is working with outside security experts to find the cause and how far the problem reaches.

Why it matters

Many customers use these apps to sell items, rent things, or buy goods online. Without them, people cannot finish orders or get payments through the usual steps. The company has not yet said whether customer data was taken, so people should watch for official updates.

Glossary

2nd STORAGE
A home-delivery storage service, where items are picked up and kept in storage for customers.
Security전자신문

Tioli Releases Emergency Response Guide for 'Node2Shell'

Tioli said on the 26th that it had independently reproduced and verified the Node.js vulnerability 'Node2Shell (CVE-2026-111497)', disclosed on the 21st, and published a response guide. The flaw stems from a memory-handling error when decompressing Brotli-compressed data, and Node.js rates its severity as High. Patched versions 22.23.4, 24.22.1, and 26.12.1 were released.

SecurityVnExpress

The Privacy Risks of "Always-Listening" AI Devices

AI-enabled devices such as smart speakers, smartwatches and smart glasses that are always ready to respond can collect data, raising privacy concerns. Global shipments of AI glasses reportedly jumped to 8.4 million in 2025 from 2.1 million in 2024, according to Omdia data cited by Reuters. Experts warn that bystanders may be monitored without owning any device, and that AI can interpret far more collected information than earlier voice assistants.

Security전자신문

Election Deepfakes Up 27% Worldwide; South Korea Ranks Third in Cumulative Cases

Reported AI-generated election deepfakes surged worldwide, with January to September 2026 cases already exceeding last year's full-year total by 27%, according to a Surfshark study. South Korea ranks third globally in cumulative cases with 16 since 2021, behind the United States and India. The study counted 235 cases across 46 countries from January 2020 to September 2026.