Skip to content
~/pwn.watch_

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

Become a sponsor

One slot: pwn.watch, gifs.so, flavors.design, kitze.io, every kitze repo, and an X shout-out.

YearlyBest value · save 44%$999/year$83.25/mo, billed yearly. Save $789 vs monthly (5+ months free).Monthly$149/monthBilled monthly. Cancel anytime.

Secure checkout on Polar. Right after paying you set up your ad on kitze.io.

← Breaches & attacks
LiveMediumNo fix neededBreaches & attacks

Good Smile Company: official online shop breached, member details and partial card data possibly viewed

Good Smile Company official online shop

Good Smile Company, the Japanese figure maker, says a third party accessed its official online shop between about 3pm on Oct 19 and 10pm on Oct 22 2026 (JST), and members' names, addresses, phone numbers, order details and card last four digits and expiry dates may have been viewed. The shop was closed while the vulnerability is fixed. Customers are warned about phishing emails, calls and SMS.

Why this severity: Personal data and partial card data (last 4 + expiry) possibly viewed; count not disclosed

Started
Oct 19, 2026

Follow this incident

Affected

  • Good Smile Company online shop members

Fixed in

No fixed release yet

Timeline2

  1. Good Smile discloses the incident and closes the shop to fix the vulnerability.

  2. Unauthorized access to the official shop begins (about 3pm JST) and continues until about 10pm on Oct 22.

Advisories1

News & write-ups2

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Sponsored

Buy sponsor slot · $149/mo