E‑Store Issues Final Report on ShopServe Breach — About 23.36 Million Affected, ~2.1 Million Include Partial Card Data
SUMMARY
On October 16, Eストアー published a final report on the information leak in the e‑commerce building service "ショップサーブ." The affected individuals total about 23,360,000 (across 7,858 stores), of whom about 2,100,000 had cardholder name, partial card number, and expiration date exposed. The unauthorized access occurred from May 21 to August 1, 2026, and data was exfiltrated from the database after an application vulnerability was exploited.
The company's investigation found that an application vulnerability on its server was exploited, and an unauthorized program was executed that sent information from the database to an external destination.
Although the card numbers were only partially exposed, the combination of cardholder name and expiration date could be used to create counterfeit cards or for phishing, so affected users are advised to expect contact from their card issuer and to check their account statements.
This incident is a breach of an EC platform where data from multiple stores is centralized, and confirmations of impact through the affected stores are expected to proceed across various locations.
- #Eストアー
- #ショップサーブ
- #payment card data
- #data breach
Source
Eストアー 公式お知らせ(最終報) — https://estore.jp/press/20261016This article summarizes the content of the source below. Refer to the original source for accuracy. Last updated: October 18, 2026
Was this article helpful?
Written & reviewed
Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction