Incident response and recovery report
We will keep publishing the facts we have confirmed and the measures we have actually completed. Items under investigation are clearly distinguished from items confirmed safe.
Last updated: Oct 17, 2026 01:12 JST
- Current status
- The unauthorized access identified on October 14 and 16, 2026 has been traced and blocked. We are now investigating the scope and impact of the leaked information together with an external cybersecurity firm.
- Next update
- The findings of the external investigation are expected as early as Sunday, October 18. We will post them on this page as soon as they are available.
Scope of impact
The scope of affected stores is being investigated with an external cybersecurity firm. We will publish the number of stores and details once confirmed.
Known secondary-fraud methods
Emails quoting leaked order information (order date, item, amount, delivery details, etc.) and asking recipients to contact a LINE account for an "out-of-stock refund" have been confirmed. They are sent from free email addresses unrelated to the stores.
Investigation status
The entry routes of both incidents (October 14 and 16) have been identified. The scope and impact of the leak are being investigated with an external firm.
Security improvements
Marketplace and service integrations
| Marketplace / service | Status | Details | Action needed from stores |
|---|---|---|---|
| Rakuten Ichiba | Suspended | Suspended since October 17, 2026 following a notice from Rakuten Ichiba. Inventory, product and order synchronization will not take place. We are discussing how to connect during the suspension. |
|
| futureshop | Suspended | Since 17:40 on October 16, 2026, inventory, product and order synchronization has been suspended. We are discussing resumption with futureshop. |
|
Other integrations
There is currently no suspension notice for the integrations below. If the situation changes, we will add them to the table above. Note that all WASABI SWITCH accounts have been temporarily deactivated since 18:00 on October 16 (see "For stores" for how to reactivate).
Rakuma, Yahoo! Shopping, Yahoo! Auctions, Mercari Shops, Amazon, au PAY Market, Jmty, Musbi, eBay, Shopee, Lazada, Chrono24, eLADY, Qoo10, Luxuness, Yahoo! Taiwan, WeChat, Walmart, THE LUXURY CLOSET, Vestiaire Collective, Catawiki, PopChill, 95, Into Archive, Shopify, SHOPLINE, Shopserve, EC-CUBE, SNKRDUNK, Sumasell, Bramo, FROM JAPAN, JOOM, DOKODEMO, LUXCLUSIF, BUYMA, MOLTS, Rakuichiban, m department, TikTok Shop, Coupang, Etsy
Support for customers and stores
Timeline of events and response
- Action
Rakuten Ichiba integration temporarily suspended following a notice from Rakuten
Rakuten asked that API license keys not be used until safety is fully ensured. We corrected our guidance and asked stores to hold off on reissuing keys.
- Published
Published a request to reissue Rakuten Ichiba API license keys
As a preventive measure, stores were asked to reissue their API license keys after deletion (later corrected).
- Published
Published notice on the futureshop integration suspension
- Action
All WASABI SWITCH accounts temporarily deactivated
- Action
futureshop revokes API keys; integration suspended
Information not yet disclosed
Information that could be exploited by attackers, such as technical details of the entry routes, or that could affect the investigation, is being withheld for now. We will publish it as soon as it becomes possible.
Schedules and estimates in this report do not guarantee when the investigation or recovery will be completed.