3 sources 24m ago
Bandai Namco Reports Leak of 346,247 Gundam Base Members Email Addresses
Bandai Namco Entertainment and BANDAI SPIRITS announced on October 27, 2026 that email addresses tied to THE GUNDAM BASE MEMBERS had leaked after unauthorized access at contractor Ymir Link, which handles email delivery for Bandai Namco ID.
Reporting from 3 sources: 4Gamer.net, Game Spark, Inside.
Why it matters
The same week brought a second disclosure: on October 26 Bandai Namco Holdings logistics unit Bandai Logipal reported unauthorized access that may have exposed names, addresses and phone numbers tied to Ichiban Kuji ONLINE deliveries, with the record count still unknown.
Key Facts
- Bandai Namco Entertainment and BANDAI SPIRITS announced on October 27, 2026 that 346,247 email addresses registered to THE GUNDAM BASE MEMBERS had leaked.
- The leak came from unauthorized access at contractor Ymir Link, which reported the intrusion to Bandai Namco Entertainment on October 26.
- The leaked data also includes internal identifiers for Bandai Namco ID management but not names, addresses, purchase history, passwords or credit card information.
- The affected email delivery service for THE GUNDAM BASE MEMBERS has been suspended while Bandai Namco ID and THE GUNDAM BASE MEMBERS remain available.
The confirmed data is 346,247 email addresses registered to THE GUNDAM BASE MEMBERS plus internal identifiers used for Bandai Namco ID management. Names, addresses, purchase history, login passwords and credit card details are not part of the leaked data. Ymir Link reported the signs of intrusion to Bandai Namco Entertainment on October 26. The email delivery service for THE GUNDAM BASE MEMBERS that was affected has been suspended, while Bandai Namco ID and THE GUNDAM BASE MEMBERS themselves remain usable. The companies reported the matter to the Personal Information Protection Commission, are still investigating cause and scope with Ymir Link, and will contact affected users individually. No secondary damage has been confirmed, but the notice warns of spoofing and phishing mail sent to the leaked addresses.
The count of affected users is still being checked on one front. Bandai Namco Entertainment said the impact on other user environments entrusted to Ymir Link is not yet settled, so 346,247 may not be the final figure for the wider Bandai Namco ID email service.
The notice tells users how the company will handle outreach: when Bandai Namco Entertainment sends mail about the incident, it will leave URLs out of the body so recipients can distinguish it from forgeries. Users are asked not to open links or enter details in suspicious messages, and a dedicated inquiry form is open for questions about the Ymir Link access.
A separate breach sits alongside this one. Bandai Logipal, the logistics subsidiary of Bandai Namco Holdings, reported unauthorized access to a system it manages, and delivery information for Ichiban Kuji ONLINE orders, for which BANDAI SPIRITS consigns shipping work to Logipal, may have leaked. Names, addresses and phone numbers are the data at risk there; credit card information is not included and no misuse has been confirmed. Logipal's shipping system has been stopped since October 26 for a full inspection and stays offline until safety is confirmed, with the record count promised in a later update.
Written with AI by Yomimono from the 3 cited sources below, including Japanese-language reporting where cited. See our editorial policy.
Add Yomimono as a preferred source on Google