Security Knowledge
← Incident database

estore-shopserve-2026 · Disclosed 2026-08-01

ショップサーブ: unauthorized access and impact

A malicious server program transmitted buyer data externally; the entry mechanism remains under investigation. 8,853,839 registered records may include multiple entries per person; merchant credentials were also affected.

Cause unresolved / undisclosed

Outcome: Confirmed breach

Entry path and evidence

  • Reported fact

    A malicious server program transmitted buyer data externally; the entry mechanism remains under investigation.

    [s1]第2報 §§1-4 / 対象件数
  • Reported fact

    8,853,839 registered records may include multiple entries per person; merchant credentials were also affected.

    [s1]第2報 §§1-4 / 対象件数

Timeline

  1. Event date reported by the source. [s1]

  2. Disclosure date established by the reviewed notice. [s1]

Reported response

  • Reported fact

    Attack-source traffic was blocked and customer and merchant password changes requested.

    [s1]第2報 §§1-4 / 対象件数

Evidence relevant to prevention

Insufficient evidence

Undisclosed entry or patch timing prevents an avoidability assessment. Inspect privileges, retrieval logs, retention and deployed configuration using the linked rules.

Editorial assessment; not a determination of liability. [s1]

Unknowns and AI involvement

AI involvementUnknown

The reviewed disclosures do not establish attacker use of AI.

The initial entry chain, product, CVE and availability of a prior fix are undisclosed.

Sources

  1. [s1] ショップサーブ · Primary source

    ショップサーブ：事故に関する公表資料 ↗

    Reviewed 2026-10-09