Good Smile Company Reports Potential Customer Data Breach Due to Unauthorized Access

Good Smile Company announced on October 23rd that unauthorized access by a third party occurred on its e-commerce site, "Good Smile Company Official Shop," resulting in the unauthorized viewing of members' personal information. The site is currently closed, and its reopening date is undecided.

As a result of the company's investigation into system records, it was discovered that between approximately 3 PM on October 19th and 10 PM on October 22nd, the site's administrative information was accessed multiple times through unauthorized means.

Information that may have been viewed includes: name, phonetic name (furigana), gender, address, phone number, and email address. In addition to order date, product name, quantity, amount, payment method, and payment status, the names, addresses, and phone numbers of separately registered shipping destinations are also included.

Regarding card-related information, the brand, the last four digits of the card number, and the expiration date may be affected. Cardholder names, card numbers other than the last four digits, and security codes are not included.

The company has patched the site's vulnerability, which is believed to be the cause, and is continuing its investigation and response. Potentially affected members will be notified sequentially via email once confirmation is complete.