H2 INTERACTIVE has revealed that a leak of member information occurred at “DIRECT GAMES,” a PC game key sales store operated by its Japanese subsidiary, H2INT Co., Ltd., due to unauthorized access by a third party.
Credit card information was not compromised
According to the report, the unauthorized access occurred between Saturday, October 17, 2026, and Sunday, October 18, 2026, resulting in the leakage of member IDs, encrypted login passwords, dates of birth, names, and order histories.The company states that it has implemented all necessary technical measures to prevent further leaks, is thoroughly analyzing the cause, and is reviewing its security systems.
Excerpt from the report
[Overview of the Incident]
After confirming the possibility of unauthorized access to DIRECT GAMES by a third party and conducting an investigation, it was determined on Sunday, October 18, 2026, that unauthorized access occurred between Saturday, October 17, 2026, and Sunday, October 18, 2026, resulting in the leakage of member information.Upon becoming aware of the unauthorized access,
the company immediately blocked access from the source in question.【Cause】
At this time, we have confirmed that this was caused by unauthorized access by a third party. We plan to conduct an investigation in collaboration with an external specialized agency to determine the circumstances that enabled this unauthorized access and the specific cause.
[Leaked Member Information]
Member ID (email address), encrypted login password, date of birth, and full name (Kanji and Kana). *We do not store credit card numbers
, so none were leaked.
*Since the date of birth and full name are information voluntarily provided during member registration, they may not match actual personal information.[Our Response]
Completed: Blocked communications from
the source of the unauthorized access; implemented system improvements and interim measures (including a notice requiring all members to reset their passwords); established a task force; and reported the incident to the Personal Information Protection CommissionOngoing and Being Implemented in Stages: Implementation of
permanent countermeasures; various investigations in collaboration with external specialized agencies; and sending notifications via email to affected customers[Measures to Prevent Recurrence]
We will strengthen our system security measures and monitoring systems, and work to prevent recurrence while seeking advice from external specialized organizations.
[Request to Customers]
Please be wary of suspicious emails purporting to be from our company or our services. If you receive a suspicious message, please do not click on any URLs, open any attachments, or enter your membership information or password.We will never ask you for your password via email or phone.
Additionally, if you are using the same email address and password combination for other companies’ services as you do for DIRECT GAMES, or if you are using a password that can be easily guessed, please change your password immediately.
Please note that following recent maintenance to enhance security, “DIRECT GAMES” notified registered users that they would need to reset their passwords.
