株式会社グッドスマイルカンパニーData breach / unauthorized access incident
- Occurred on
- October 19, 2026
- Announced on
- October 23, 2026
- Severity
- AFinancial and HR records — information that easily translates into monetary damage.
- Scale
- Unknown
- Main impact
- The official shop experienced unauthorized access by a third party, and members' basic information such as names, addresses, phone numbers, and email addresses, as well as order information (product name, amount, delivery address) and credit card brand, last 4 digits, and expiration date may have been viewed. The number of affected records has not been disclosed.
- Information involved
- Full nameHome addressPhone numberEmail addressCard & payment data
- Cause / key point
- Information was viewed through unauthorized access that exploited a vulnerability.About Exploitation of vulnerabilities
- Industry
- Retail & e-commerce
- Last updated
- October 27, 2026
Where to go for this information
The steps themselves are on the protection guide. These links match the kinds of data in this incident, plus support contacts.
Ask AI about this incident
Opens an AI chat with this page's URL already in the prompt. Treat the answer as a starting point — always verify with the official sources listed above.
Is this incident worth paying attention to?
Written & reviewed
Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Incidents related to "クレジットカード"
Incidents where the damage spread through the same service or system.
- SS楽天トラベル2026.10.26 announced・Affected 2,600,000 people
- SSSカプコン（CAPCOM ID）2026.10.22 announced・Affected 11,774,247 records
- SSリクルート（カーセンサーnet、C-MATCH）2026.10.21 announced・Affected 3,709,551 records
- SGMOインターネット（お名前.com デスクトップクラウド）2026.10.21 announced・Affected 26,739 records
- Aラクスライトクラウド（ブラストメール）2026.10.21 announced・Affected Unknown
- A株式会社日建学院（事前確認講習システム） / （公財）マンション管理センター2026.10.20 announced・Affected 3,597 people
Same attack method
- SSHelpfeel（Gyazo）2026.09.16 announced・Affected 23,620,000 records
- SSEストアー(ショップサーブ)2026.10.16 announced・Affected 23,356,000 people
- SSSアドベンチャー（スカイチケット）2026.10.10 announced・Affected 14,640,000 records
- SSSKDDI(ISP事業者向けメール基盤)2026.06.23 announced・Affected 12,231,954 people
- Sムラウチドットコム2026.09.15 announced・Affected 7,710,000 records
- Sホワイトエッセンス（予約・基幹システム）2026.10.05 announced・Affected 1,050,000 accounts
Same industry
- SS株式会社アンドエスティHD2026.10.23 announced・Affected 2,500,000 people
- S阪急阪神百貨店（H2O ID等）2026.10.19 announced・Affected 1,260,000 records
- Sパピレス（Renta!）2026.10.19 announced・Affected Unknown
- Sジグザグ（WorldShopping）2026.10.19 announced・Affected 301 people
- Sブックオフグループ(ブックオフコーポレーション)2026.10.09 announced・Affected 6,383,279 people
- Sアクティブ（通販サイト）2026.10.06 announced・Affected 54,916 records
Attack method classification: Exploitation of vulnerabilities(Breaking in through holes in software and devices)
Read the Exploitation of vulnerabilities guide and national trends →