ギフティグループ（連結子会社ギフティ）Data breach / unauthorized access incident
- Occurred on
- October 25, 2026
- Announced on
- October 26, 2026
- Severity
- AFinancial and HR records — information that easily translates into monetary damage.
- Scale
- Unknown
- Main impact
- eギフト was fraudulently issued via unauthorized third‑party access, and an estimated loss of 約5億5000万円 is expected to be recorded as an extraordinary loss.
- Information involved
- Not specified in the disclosure
- Cause / key point
- eギフト were fraudulently issued due to unauthorized access by a third party who exploited a system vulnerability.About Exploitation of vulnerabilities
- Industry
- Services & other
- Sources
- Last updated
- October 27, 2026
Where to go for this information
The steps themselves are on the protection guide. These links match the kinds of data in this incident, plus support contacts.
Ask AI about this incident
Opens an AI chat with this page's URL already in the prompt. Treat the answer as a starting point — always verify with the official sources listed above.
Is this incident worth paying attention to?
Written & reviewed
Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Same attack method
- SSHelpfeel（Gyazo）2026.09.16 announced・Affected 23,620,000 records
- SSEストアー(ショップサーブ)2026.10.16 announced・Affected 23,356,000 people
- SSSアドベンチャー（スカイチケット）2026.10.10 announced・Affected 14,640,000 records
- SSSKDDI(ISP事業者向けメール基盤)2026.06.23 announced・Affected 12,231,954 people
- Sムラウチドットコム2026.09.15 announced・Affected 7,710,000 records
- Sホワイトエッセンス（予約・基幹システム）2026.10.05 announced・Affected 1,050,000 accounts
Same industry
- SSリクルート（カーセンサーnet、C-MATCH）2026.10.21 announced・Affected 3,709,551 records
- S日本郵政（ゆうID・ゆうゆうポイント）2026.10.19 announced・Affected 249 accounts
- Sスクウェア・エニックス2026.10.19 announced・Affected Unknown
- S第一興商（ビッグエコー等）2026.10.08 announced・Affected 8,631,000 records
- Sセレス（ポイントインカム）2026.10.07 announced・Affected 195 records
- Sエバーグリーン・マーケティング（メール）2026.10.06 announced・Affected 763 records
Attack method classification: Exploitation of vulnerabilities(Breaking in through holes in software and devices)
Read the Exploitation of vulnerabilities guide and national trends →