Good Smile Company: Member Information May Have Leaked After Unauthorized Access to Official Shop—Site Closed as Cause Is Investigated

There is also a possibility that some credit card information may have been accessed

Culture Culture
Good Smile Company: Member Information May Have Been Compromised Due to Unauthorized Access to Official Store—Site Shut Down While Cause Is Investigated
Good Smile Company: Member Information May Have Been Compromised Due to Unauthorized Access to Official Store—Site Shut Down While Cause Is Investigated
  • Good Smile Company: Member Information May Have Been Compromised Due to Unauthorized Access to Official Store—Site Shut Down While Cause Is Investigated

Good Smile Company, known for its anime and video game merchandise, reported that its official online store had been compromised by unauthorized third-party access and that the site had been shut down as a result.

Some credit card information may have been accessed

According to the company, unauthorized access by a third party occurred on the “Good Smile Company Official Shop” from shortly after 3:00 PM on October 19, 2026, until around 10:00 PM on October 22, 2026. The company stated that personal information of the site’s members was accessed without authorization.

Upon discovering the incident, the site was immediately shut down, and efforts to identify the cause are underway. Based on investigations conducted at the time of writing, the company has indicated that it believes the incident was caused by “unauthorized access due to a vulnerability.”

To prevent a recurrence, the company is reportedly strengthening system security, including patching the vulnerability believed to be the cause.

The information that may have been accessed is as follows.

  • Basic Information

    Name, phonetic reading, gender, address, phone number, email address

  • Order Information

    Order date, product name, quantity, total amount, delivery address, recipient’s name, and phone number [if registered separately], payment method, payment status (whether payment was completed or not)

  • Credit Card Information

    Credit card brand, last 4 digits of the card number, and expiration date

    * Does not include the cardholder’s name, the full card number (excluding the last 4 digits), or the security code

In addition, the company is warning customers to be on the lookout for suspicious emails, phone calls, and SMS messages that may exploit the leaked information for fraud or identity theft, and has posted contact information for inquiries regarding this matter on its website.


By ケシノ