Overview
Access was detected October 29, abused credentials were disabled and the system shut down October 30 after continued access. Because about 5.5 million is an approximate maximum including duplicates, the numeric field is NULL. On November 6 three card numbers were also confirmed. Client-level counts such as 2rinkan’s are not added.
Timeline
- Occurred
- Discovered
- Disclosed
Unauthorised access detected and abused credentials disabled.
System shut down after continued access.
Three card numbers additionally confirmed.
Organization response
The group shut down the system, engaged external investigators, reported to the PPC and consulted police, and is coordinating notifications with clients. Services continued through alternative operations.
What you can do
Verify notices through official channels, avoid links or attachments in unexpected messages, and do not provide credentials or account details.
Sources
- 同件第2報：カード情報3件を確認プレステージ・インターナショナル · 2026-11-09
- 業務システムへの不正アクセスによる個人情報漏えいプレステージ・インターナショナル · 2026-11-09