saga-hirakawaya-payment-2026 · Disclosed 2026-06-15
佐嘉平川屋: unauthorized access and impact
A system vulnerability was exploited to alter the payment application. 73,213 personal-data records represent 30,170 people; 6,303 card records represent 5,783 people. Record and person counts are distinct; overlap is unknown. Card data includes security codes.
Outcome: Confirmed breach
Entry path and evidence
- Reported fact
A system vulnerability was exploited to alter the payment application.
[s1]pp.1-3 §§1-5 - Reported fact
73,213 personal-data records represent 30,170 people; 6,303 card records represent 5,783 people. Record and person counts are distinct; overlap is unknown. Card data includes security codes.
[s1]pp.1-3 §§1-5
Timeline
Reported response
- Reported fact
The site was suspended and externally investigated; remediation and preventive measures are planned.
[s1]pp.1-3 §§1-5
Evidence relevant to prevention
Insufficient evidence
Undisclosed entry or patch timing prevents an avoidability assessment. Inspect privileges, retrieval logs, retention and deployed configuration using the linked rules.
Editorial assessment; not a determination of liability. [s1]
Unknowns and AI involvement
The reviewed disclosures do not establish attacker use of AI.
Record and unique-person counts are different. Personal-information and card-information scopes overlap and are not additive.
Sources
[s1] 佐嘉平川屋 · Primary source
佐嘉平川屋：事故に関する公表資料 ↗Reviewed 2026-10-09