ビューティガレージ（ECサイト(2026年10月)）Data breach / unauthorized access incident
- Occurred on
- October 10, 2026
- Announced on
- October 15, 2026
- Severity
- AFinancial and HR records — information that easily translates into monetary damage.
- Scale
- 775,725 accounts
- Main impact
- A leak of 775,725 customers' records from ビューティガレージ and アイラッシュガレージ was confirmed; affected data include names, phone numbers, email addresses, password hashes, and hashes of password reset questions and answers.
- Information involved
- Email addressPasswordPhone numberFull name
- Cause / key point
- An unauthorized third-party intrusion into the EC site's server. The company says it has identified and blocked the route used in this incident, but has not disclosed detailed intrusion methods.
- Industry
- Retail & e-commerce
- Listing / capital
- Listed company東証プライム 3180(ビューティガレージ)
- Last updated
- October 20, 2026
Stock price reaction to the disclosureビューティガレージ / 東証プライム 3180
Stock information is reference data based on Yahoo Finance and may be delayed. This site does not solicit or advise investment and does not guarantee the accuracy or completeness of this information. We accept no liability for any investment decision based on it.
Is this incident worth paying attention to?
Written & reviewed
Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Incidents related to "ハッシュ"
Incidents where the damage spread through the same service or system.
- Sクリプトン（SONICWIRE・D2R）2026.10.19 announced・Affected 420,000 records
- Bリンクステーション（GETTIIS会員情報）2026.10.19 announced・Affected Unknown
- Aファンケル・アテニア（EC会員情報）2026.10.16 announced・Affected 834,947 records
- SNTTソルマーレ（コミックシーモア）2026.10.15 announced・Affected Unknown
- SSライドオンエクスプレス（『銀のさら・釜寅・すし上等』公式サイト・公式アプリ）2026.10.13 announced・Affected 6,500,000 records
- SSSアドベンチャー（スカイチケット）2026.10.10 announced・Affected 14,640,000 records
Same attack method
- SSソースネクスト2026.10.15 announced・Affected 22,519,960 records
- SSバーガーキング・ジャパン(公式アプリ)2026.10.15 announced・Affected 11,180,000 records
- SS焼肉きんぐ2026.10.05 announced・Affected 10,788,963 records
- Bユミルリンク（メール配信システム）2026.10.19 announced・Affected 9,000,000 records
- SSタイムズカー(タイムズモビリティ)2026.09.25 announced・Affected 6,600,000 accounts
- Sブックオフグループ(ブックオフコーポレーション)2026.10.09 announced・Affected 6,383,279 people
Same industry
- S阪急阪神百貨店（H2O ID等）2026.10.19 announced・Affected 1,260,000 records
- Sパピレス（Renta!）2026.10.19 announced・Affected Unknown
- Sジグザグ（WorldShopping）2026.10.19 announced・Affected 301 people
- Sアクティブ（通販サイト）2026.10.06 announced・Affected 54,916 records
- SMrMax2026.10.06 announced・Affected 1,735,154 people
- S講談社BECK（旧ビーシーのメール）2026.10.02 announced・Affected 1 records
Attack method classification: Unauthorized access (method undisclosed)(Breached, but the technique was not identified or disclosed)
Read the Unauthorized access (method undisclosed) guide and national trends →