已確認

IMADEYA: stolen Shopify Admin API token used to exfiltrate order/customer data

After phishing reports on the night of Aug 20, 2026 that correctly cited name/order no./amount, IMADEYA opened an investigation and posted Aug 21. Second report confirmed a Shopify Admin API token from an in-house integration was stolen and used from overseas IPs to pull order/customer data. Card data not leaked.

最後更新: 2026-11-09

此內容以 English 顯示。

概述

No published headcount (blank).

時間軸

不明發生
2026-08-20發現
2026-08-21公布

組織應對措施

Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.

使用者應對建議

Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.

資訊來源

お客様情報の外部流出の可能性に関するお詫びとお知らせ（第1報）株式会社いまでや · 2026-11-09
お客様情報の外部流出に関するお詫びとお知らせ（第2報）株式会社いまでや · 2026-11-09

IMADEYA: stolen Shopify Admin API token used to exfiltrate order/customer data

概述

時間軸

組織應對措施

使用者應對建議

資訊來源

相關資訊與討論

目前沒有公開資訊

留言與回覆

寫留言