Anime, manga, and games, with a take · A Yukimedia publication

Good Smile Company Reopens Store for Browsing After Breach

Good Smile Company said Thursday that its online store will partially reopen on Friday, November 6, after an unauthorized third party accessed customer information. The store will show product information only, restored from a backup taken before the intrusion.

Reporting from 1 source: Anime News Network.

Why it matters

The partial reopening sets a visible line between what Good Smile can restore from a backup and what it cannot: any function tied to accounts or checkout stays shut until an independent investigation closes, which leaves the storefront informational for the foreseeable run of the probe.

Good Smile Company Reopens Store for Browsing After Breach

Key Facts

  • Good Smile Company partially reopens its online store on November 6 for product information viewing only.
  • The company discovered the breach on October 23 and restored the store from a backup taken before the unauthorized access.
  • A malicious program was present on the credit card payment page from October 21 at 1:55 p.m. JST to October 23 at 7:00 a.m. JST.
  • Good Smile Company said 2,800 customers who may have entered card details during that window may be affected.
  • The company estimated 402,466 credit cards may have partial information exposed, excluding duplicates.

Account registration, new orders, cart additions, and the Watchlist stay offline. The company reported the incident to Japan's Personal Information Protection Commission and said 2,800 customers who may have entered card details during the exposure window have been emailed.

Good Smile Company took the store offline on October 23 after discovering the breach. A malicious program sat on the credit card payment page from October 21 at 1:55 p.m. JST to October 23 at 7:00 a.m. JST, and the company traced the installation on October 28.

The checks the company lists before full service returns: strengthened web application firewall, 24 hour monitoring, and an independent security team's finding that browsing carries no virus or data-theft risk. Cardholder names and security codes were not exposed in the partial-information group, which the company counts at 402,466 cards excluding duplicates.

Written with AI by Yomimono from the 1 cited source below, including Japanese-language reporting where cited. See our editorial policy.

Add Yomimono as a preferred source on Google

Sources