saga-hirakawaya-payment-2026 · Disclosed 2026-06-15
佐嘉平川屋: unauthorized access and impact
A system vulnerability was exploited to alter the payment application. 73,213 personal-data records represent 30,170 people; 6,303 card records represent 5,783 people. Record and person counts are distinct; overlap is unknown. Card data includes security codes.
Outcome: Confirmed breach
Entry path and evidence
- Reported fact
A system vulnerability was exploited to alter the payment application.
[s1]pp.1-3 §§1-5 - Reported fact
73,213 personal-data records represent 30,170 people; 6,303 card records represent 5,783 people. Record and person counts are distinct; overlap is unknown. Card data includes security codes.
[s1]pp.1-3 §§1-5
Timeline
Reported response
- Reported fact
The site was suspended and externally investigated; remediation and preventive measures are planned.
[s1]pp.1-3 §§1-5
Cause and mitigation hypotheses
Not assessed. Editorial hypotheses have not been added for this incident; this does not establish safety or a confirmed cause.
Evidence relevant to prevention
Insufficient evidence
Undisclosed entry or patch timing prevents an avoidability assessment. Inspect privileges, retrieval logs, retention and deployed configuration using the linked rules.
Editorial assessment; not a determination of liability. [s1]
Unknowns and AI involvement
The reviewed disclosures do not establish attacker use of AI.
Record and unique-person counts are different. Personal-information and card-information scopes overlap and are not additive.
Sources
[s1] 佐嘉平川屋 · Primary source
佐嘉平川屋：事故に関する公表資料 ↗Reviewed 2026-10-09