En cours d’enquête

Smaregi: EC admin-login vulnerability may have let attackers view/obtain personal data in some merchant environments

Unauthorized access via an EC admin-login vulnerability on Smaregi EC Repeat/B2B. Up to four merchant environments may be affected; customer/order/admin data may have been viewed or taken. Vulnerability fixed Sep 18; disclosed Sep 25, 2026.

Dernière mise à jour: 2026-11-09

Ce contenu est affiché en English.

Présentation

No person-level headcount → blank (four merchant environments).

Chronologie

InconnuSurvenue
2026-09-18Découverte
2026-09-25Divulgation

Réponse de l’organisation

Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.

Que faire ?

Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.

Sources

スマレジECにおける不正アクセスについて株式会社スマレジ · 2026-11-09

Informations associées

Partager une information

Aucune information publiée

Les informations apparaîtront après vérification ou modération.