Good Smile Company reports breach of official shop site, closes it
The company says member personal data was illicitly viewed and some credit card details may have been exposed between October 19 and 22.
Good Smile Company said it detected unauthorized third-party access to its official shop site and has closed the site, according to gamespark.jp. The company said member personal information was illicitly viewed and that some credit card information may also have been viewed.
According to the company, the access occurred between just after 15:00 on October 19, 2026 and around 22:00 on October 22, 2026. The data that may have been viewed includes names, addresses, phone numbers, email addresses, order details, payment methods, card brand, the last four digits of card numbers and expiry dates.
Good Smile Company said full card numbers, cardholder names and security codes are not included in the possibly viewed data.
The shop site was closed immediately after the incident was discovered. The company said it is working to identify the cause, which it believes to be an intrusion exploiting a vulnerability, and is fixing the suspected vulnerability to strengthen system security and prevent a recurrence.
The company also warned users about suspicious emails, calls and SMS messages that attempt fraud or impersonation.
Quick answers
What data may have been exposed in the Good Smile Company shop breach?
The company says names, addresses, phone numbers, email addresses, order details, payment methods, card brand, last four card digits and expiry dates may have been viewed. Full card numbers, cardholder names and security codes are not included.
When did the unauthorized access occur?
According to Good Smile Company, the access took place between just after 15:00 on October 19, 2026 and around 22:00 on October 22, 2026.
Is the Good Smile Company shop site still closed?
The company said the site was closed immediately after the incident was discovered and that it is investigating the cause.