This article provides answers to frequently asked questions for customers in Group A.
Applicable to: Customers who meet the following condition(s)
Customers who have registered credit card information with the Good Smile Company Online Store at any time in the past
Information that may have been exposed
- Last four digits of the card number
- Expiration date
FAQ
1. Was any information other than the last four digits of the card number and expiration date exposed?
The only information that may have been exposed is the last four digits of the card number and the expiration date.
The database that may have been accessed without authorization did not retain any digits of the card number other than the last four, the cardholder’s name, or the security code, so there is no possibility that these details were exposed.
In addition, no unauthorized access to the database containing registered member information has been confirmed, so no member information linked to the last four digits of the card number and expiration date was exposed.
2. If I have not received an email about possible information exposure, does that mean I am unaffected?
For customers who have previously registered credit card information with the Good Smile Company Online Store, we are still verifying the number of affected customers and have not sent individual email notifications.
Even if you have not received an email, you are included in this group if you have ever registered credit card information with the store. Please review the information on this page.
3. Why were the last four digits of card numbers and expiration dates exposed?
A vulnerability in part of the system used by the Good Smile Company Online Store was exploited to gain unauthorized access to a credit card information database within the store’s system.
Information other than the last four digits of card numbers and expiration dates was not retained in the database, in accordance with the applicable information security standards, and was therefore not exposed.
4. Was the information exposed because you stored credit card information?
The Good Smile Company Online Store was designed to store the last four digits of card numbers and expiration dates. Information other than these details was not retained in the database, in accordance with the applicable information security standards, and was therefore not exposed.
In light of this incident, we are considering reviewing our operating practices.
5. If part of my previously registered card information (the last four digits and expiration date) was exposed, could it be used fraudulently?
It is generally difficult to make payments using only the last four digits of a card number and its expiration date, and no exposure of names or other member information linked to these details has been confirmed. We therefore understand that the possibility of unauthorized use based solely on the information that may have been exposed in this incident is extremely low.
6. Will you provide compensation?
We understand that, in general, losses resulting from unauthorized credit card use are handled in accordance with the credit card issuer’s compensation policies and fraud detection systems.
If you identify any charges you do not recognize, please promptly contact your card issuer for assistance.
7. What should I do if I want my credit card reissued?
We apologize for the inconvenience, but if you would like your card replaced or reissued, please contact your card issuer directly using the contact details on the back of your card.
8. Since the exposure was caused by your company, I would like you to arrange for my credit card to be reissued.
We sincerely apologize for the inconvenience and burden this has caused you. Under credit card agreements and account management terms, third parties, including the Company, generally cannot request card reissuance on behalf of the cardholder.
We regret the inconvenience, but ask that you contact your card issuer using the contact details on the back of your card to arrange or discuss reissuance yourself.