Giftee Vulnerability Exploited for Unauthorized Issuance of Electronic Gift Vouchers, Estimated Loss of 550 Million Yen

According to Security NEXT, Giftee Group announced that its subsidiary Giftee suffered unauthorized access exploiting a system vulnerability on October 25, 2026, resulting in a third party illicitly issuing electronic gift vouchers ^[1]. As of October 26, the company estimated its own financial losses at approximately 550 million yen, had not confirmed any abuse of vouchers held by users, and denied any monetary losses to users ^[1]. The company has not confirmed any personal data leakage, has identified the vulnerability and attack path, and has shut down the system with no plans to restart it ^[1].

Industries mainly affected: Technology

The company has not confirmed any personal data leakage, has identified the vulnerability and attack path, and has shut down the system with no plans to restart it ^[1].