Card Skimming
Security incidents tagged Card Skimming. Newest first.
1 Card Skimming incident in the last 12 months
- Incidents
- 1
- Live
- 1
- Patched
- 1
- Days without an incident
- 10
- Longest quiet run: 5 days (Oct 24–Oct 28)
- HighNo fix needed
Good Smile Company: online shop breached, card skimmer may have taken full card details of 2,800 customers
Good Smile Company, the Japanese figure maker, says a third party accessed its official online shop between about 3pm on Oct 19 and 10pm on Oct 22 2026 (JST), and members' names, addresses, phone numbers, order details and card last four digits and expiry dates may have been viewed. The shop was closed while the vulnerability is fixed. In its Oct 29 third notice, Good Smile says attackers exploited a vulnerability to gain admin rights, and a malicious program sat on the credit card payment page from 1:55pm JST Oct 21 until 7am JST Oct 23, so 2,800 customers who used that page may have had their cardholder name, full 16-digit card number, expiry date and security code exposed; they were emailed individually. The last four digits and expiry dates of 402,466 previously registered cards may also have been exposed. Customers are warned about phishing emails, calls and SMS and should check card statements.
Good Smile Company official online shopSince Oct 19, 2026
