October 23, 2026
To Our Customers
Good Smile Company, Inc. (head office: Akiba CO Building, 3-16-12 Sotokanda, Chiyoda-ku, Tokyo; President and Representative Director: Kantaro Iwasa; hereinafter referred to as “we” or “the Company”) has confirmed that an unauthorized third party accessed the Good Smile Company Online Store, the e-commerce website operated by the Company (hereinafter referred to as “the Website”), and viewed personal and other information belonging to registered members of the Website without authorization, as detailed below.
We deeply apologize for the significant inconvenience and burden this has caused our customers and all other parties concerned. We take this incident very seriously and shut down the Website immediately upon discovering the unauthorized access. We are working to determine the cause. We regret that we are not yet able to provide an estimated completion date for this work.
The facts confirmed to date and our planned response are outlined below.
1 Overview
Our analysis of system logs has revealed that information in the Website’s administration system was accessed and viewed without authorization on multiple occasions between shortly after 3:00 p.m. JST on October 19, 2026, and approximately 10:00 p.m. JST on October 22, 2026. We are continuing to investigate the details.
2 Personal and Other Information That May Have Been Viewed
- Basic information
Name, phonetic spelling of name, gender, address, telephone number, and email address - Order information
Order date, product name, quantity, amount, shipping address, recipient’s name and telephone number (if separately registered), payment method, and payment status (whether payment has been completed) - Credit card information
Card brand, last four digits of the card number, and expiration date
Note: The following information is not included: the cardholder’s name, any digits of the card number other than the last four, and the security code.
3 Cause
The investigation is ongoing. Based on our findings to date, we understand that the unauthorized access resulted from the exploitation of a vulnerability.
4 Response Status and Measures to Prevent Recurrence
- We have strengthened system security, including by remediating the vulnerability identified to date as the suspected cause. We are continuing our investigation and response efforts.
- In accordance with Japanese law, we reported this incident to Japan’s Personal Information Protection Commission today.
5 Request for Your Cooperation in Preventing Further Harm
The exposed information may be misused in fraudulent or impersonation attempts through suspicious emails, telephone calls, or SMS messages purporting to be from the Company, public authorities, financial institutions, or other organizations. Please do not respond to such communications from unfamiliar senders or callers, and do not click any links they may contain.
6 Contact for Inquiries Regarding This Incident
If you have any inquiries regarding this incident, please contact our Customer Support team below. Once we have completed the relevant checks, we plan to notify potentially affected members individually by email on a rolling basis.
Good Smile Company Customer Support
Inquiry Form
https://support.goodsmile.com/hc/en-us/requests/new?ticket_form_id=48452039907097
Note: The inquiry form operates on a separate system from the Website.
Once again, we deeply apologize for the concern this incident has caused our members and all other parties concerned. In light of this incident, we will renew our efforts to ensure thorough security measures and work to prevent recurrence and restore your trust.
Good Smile Company, Inc.
Kantaro Iwasa
President and Representative Director