Good Smile Company Announces Data Breach of Online Store
Good Smile Company announced on Monday that an "unauthorized third party" gained access to personal and other information to members of its online store from October 19-22. The information includes member names, gender, addresses, email addresses, phone numbers, order information, and some credit card information, which include the card brand, the last four digits of a used credit card, as well as expiration date. The company noted that the cardholder's name, any card number digits besides the last four, and the security code for credit cards are not included.
The announcement verifies the earlier preliminary announcement the company made on October 23 last week when the company discovered the breach and announced it to users.
The company took the online store down when it discovered the breach on October 23, and is currently investigating the incident. Good Smile Company claimed that it has since "strengthened system security," and added that it has removed the vulnerability that it identified as the cause for the security breach. The company has also reported the incident to Japan's Personal Information Protection Commission, in accordance with Japanese law.
Good Smile is a video game developer, hobby and toy merchandise manufacturer, anime producer, and online retail company. The company's signature toy lines are the popular Nendoroid and Figma figure lines. Nendoroid figures are small figures of anime, manga, and pop culture characters that are portrayed in a super-deformed style, and may have limited poseability and swappable faces. Figma is an action figure line of anime, manga, and pop culture characters that focuses on high articulation and poseability.
Sources: Email correspondence, Good Smile Company's website
KioskNews shows a cleaned-up reading view extracted from the publisher’s page — the original always lives on their site, not ours.