Cyberattacks on Japanese Companies

[yumachan]

Since around this month, there has been a massive wave of cyberattacks targeting Japanese companies, resulting in a lot of personal data leaks. This also includes companies that cater to the geek and otome community. I wanted to share this because I figured these updates might not be reaching otome game fans outside of Japan.

I truly hope none of our fellow "otome" fans are affected by this.
Let's use this thread to share tips on how we can protect our accounts and stay safe.

I'm not fluent in English so I use Google Translate.
Please forgive any small mistakes.


【List】
★BOOKOFF
★CAPCOM
★Comic CMoa (NTT Solmare)
★e+ (eplus)
★GEO / 2nd STREET (GEO Holdings)
★Good Smile Company
★Renta! (Papiless)
★SONICWIRE / D2R (Crypton Future Media, Inc.)
★VOISING

 

[yumachan]

【Comic CMoa (NTT Solmare)】
As a reasonable accommodation, the details of the harm will be kept hidden.

Leaked Information:

You must give the following reaction to unlock:

Note:
Credit card information was NOT leaked.

 

[yumachan]

【BOOKOFF】
As a reasonable accommodation, the details of the harm will be kept hidden.

Leaked Information:

You must give the following reaction to unlock:

Note:
Credit card information was NOT leaked.

 

[yumachan]

【Renta! (Papiless)】

Due to a potential unauthorized access, the Renta! service has been temporarily suspended for emergency maintenance.

 

[yumachan]

【GEO / 2nd STREET (GEO Holdings)】

Online services have been suspended due to an unauthorized access.

Note:
Personal data and other information have NOT been leaked.

 

[yumachan]

【e+ (eplus)】
As a reasonable accommodation, the details of the harm will be kept hidden.

Leaked Information:

You must give the following reaction to unlock:

Note:
Credit card information and passwords were NOT leaked.

 

[yumachan]

【VOISING】
As a reasonable accommodation, the details of the harm will be kept hidden.

Leaked Information:

You must give the following reaction to unlock:

Note:
Credit card information and passwords were NOT leaked.

 

[yumachan]

Recommended security measures include:
・Not reusing passwords
・Enabling two-factor authentication
・Change passwords periodically
・Making your passwords longer

However, if the service provider itself falls victim to a cyberattack and suffers a password breach, it feels like the length of your password—or even changing it—might not make much of a difference.
Still, it is more important than doing nothing at all.

 

[littleswanfae]

wasn't this related to the php issue everyone's talking as if the internet is gna shut down? or unrelated?

 

[raccoonNiko]

I recieved an email from Cmoa yesterday, and from what I've read, it doesn't seem like any passwords were leaked! It's definitely better to change your password anyway, just to be on the safe side...

The email said:

「1.今回流出した可能性がある情報について

・ご登録メールアドレス
・コミックシーモアで登録している生年月日
・コミックシーモアで登録している性別
・コミックシーモアで登録しているニックネーム

流出した情報にパスワードは含まれておりません。」

 

[yumachan]

>>littleswanfae
I don't think it's directly related.


>>raccoonNiko
Thanks for the comment.
This is the fourth news release from Comic C'moa.
https://www.nttsolmare.com/press/2026/1021.html
It mentions the leak of hashed passwords.
(Note: A hashed password isn't the raw password; it's converted so that the original content can't be read, so it's not the actual password itself.)

 

[yumachan]

【CAPCOM】
As a reasonable accommodation, the details of the harm will be kept hidden.

Leaked Information:

You must give the following reaction to unlock:

Note:
Credit card information was NOT leaked.

 

[yumachan]

【SONICWIRE / D2R (Crypton Future Media, Inc.)】

Leaked Information:

You must give the following reaction to unlock:

Note:
Credit card information was NOT leaked.

 

[playboy623]

Sagawa Express is not an online service but since it is one of the biggest delivery company in Japan, for those who would buy physical products (CDs or goods), they might be affected
For those who had sending and/or receiving deliveries between 2026/06/21-09/30, their names, addresses and phone numbers might be leaked, also email addresses and member IDs for those who had registered as their members. And they are still investigating if the histories of deliveries or contents of deliveries is leaked.
But luckily, none of any information related to paying methods, including informations of credit cards or bank account numbers are leaked
Still, please beware of any contacts from self-claimed Sagawa Express

 

[playboy623]

wasn't this related to the php issue everyone's talking as if the internet is gna shut down? or unrelated?

Unfortunately Japanese Companies are facing two problems at the same time
First, is the cyberattacks OP discussing here. Hackers targeted Japanese companies to steal their customers' information in order to blackmail those companies. Niconico was a victim before but rejected to pay, so they lost their website and had to close down for more than a month to rebuild everything
And second problem, of course, is the PHP issue you mentioned. But this issue was not only happened in Japan only. There were ~70% of website in the world had been affected. Really a nightmare that day :(

 

[yumachan]

【Good Smile Company】
As a reasonable accommodation, the details of the harm will be kept hidden.

Leaked Information:

You must give the following reaction to unlock:

Note:
security code of credit card information was NOT leaked.