According to Security NEXT, the Good Smile Company Official Shop shut down on October 23, 2026 after being notified by its maintenance vendor, with logs showing multiple accesses to administrative information between October 19 and October 22 [1]. The company confirmed that a system vulnerability was exploited to obtain administrator privileges and discovered on October 28 that malware had been planted [1]. Credit card holder names, card numbers, expiration dates, and security codes entered on the payment page by 2,800 customers between the afternoon of October 21 and the morning of October 23 may have been stolen [1].
This event has not been officially confirmed. Content is based on media or third-party reports.
HighMonitoringMedia reported
Good Smile Official Shop Vulnerability Exploited; Payment Card Data of 2,800 Customers Potentially Stolen
1 min read
- Disclosed
- Nov 2, 2026
- Published
- Nov 10, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Retail
What to do nowOur advice
Credit card holder names, card numbers, expiration dates, and security codes entered on the payment page by 2,800 customers between the afternoon of October 21 and the morning of October 23 may have been stolen [1]
Timeline
- Security NEXT publishes report (date only; timestamp is a placeholder)[1]
Technical details
Source-Verified Summary
The Good Smile Company Official Shop shut down on October 23, 2026 after being notified by its maintenance vendor, with logs showing multiple accesses to administrative information between October 19 and October 22. [1]
The company confirmed that a system vulnerability was exploited to obtain administrator privileges and discovered on October 28 that malware had been planted. [1]
Credit card holder names, card numbers, expiration dates, and security codes entered on the payment page by 2,800 customers between the afternoon of October 21 and the morning of October 23 may have been stolen. [1]
References
Media1
- [1]
“フィギュアやホビー商品の製造、販売を手がけるグッドスマイルカンパニーは、eコマースサイトにおいて会員の個人情報が流出したことを明らかにした。”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.