Good Smile Company Data Breach Exposes Credit Card Details

Good Smile Company has confirmed that a data breach at its online store may have exposed full credit card information for approximately 2,800 customers. An unauthorized third party installed a malicious program on the payment page between October 21 and October 23. This malware captured complete card numbers, expiration dates, security codes, and cardholder names from users who entered their details during that window.

The company also identified a separate vulnerability affecting stored payment data. Approximately 402,466 registered members may have had partial information compromised, including the last four digits of their cards and expiration dates. While names and security codes remain secure for these accounts, the exposure of remaining digits poses potential risks.

Additionally, order details for 7,673 customers who placed purchases on October 22 were accessed without authorization. This included shipping addresses, phone numbers, email addresses, and order amounts. Good Smile Company took its website offline upon discovery, strengthened system security, and reported the incident to Japan's Personal Information Protection Commission.