Important[Important / Fifth report] Forced password change, two-step verification, and a specification change to content templates
Published: Sunday, October 18, 2026, 19:15
To stores using WASABI SWITCH
Thank you for always using WASABI SWITCH.
We once again deeply apologize for the great concern and inconvenience that this unauthorized access has caused to stores and their customers.
To prevent further unauthorized access, we will implement the following measures.
This notice includes items that we urgently ask stores to act on, so please be sure to read it.
Forced password change and two-step verification [Urgent]
Further investigation found that unauthorized login attempts are targeting accounts such as:
- Accounts whose member ID is the same string as the store's WASABI SWITCH domain
- Accounts with simple, easily guessed passwords
Many stores have already changed their passwords following the second report, and we apologize for asking again.
[Important / Second report] Temporary deactivation of all WASABI SWITCH accounts and request to change passwords (https://wasabi-inc.biz/help/news/20261016-02/)
To prevent unauthorized logins more reliably, we will forcibly change the passwords of all WASABI SWITCH accounts and set up two-step verification by email.
Services covered by two-step verification
- WASABI SWITCH
- STOCK SWITCH
- STOCK SWITCH EDIT mode
- POS Register SWITCH
Date and time
Sunday, October 18, 20:30–23:30
Important notes during the change
Along with the password change, all logged-in accounts will be forcibly logged out.
Any unsaved work will be lost, so please finish and save your work before the scheduled time, and do not work during the scheduled time.
What we ask stores to do
1. After the password change, one representative of your store should contact your support representative with the "name" and "login ID" of the members you want to activate.
2. Your support representative will send the temporary reset password to the representative individually via Google Chat.
3. Once the representative has logged in to WS successfully, please change it to a strong password immediately. We will delete the temporary password sent via Google Chat.
4. Passwords for other staff accounts will be sent to the representative together. After receiving them, please make sure each staff member changes to a strong password.
5. Logging in will require two-step verification (enter the confirmation code sent to the registered email address).
* As we expect to be contacted by many stores, we will respond in the order received. It may take some time; thank you for your understanding.
* If no email address is registered for the representative's WS login ID, please tell your support representative the email address you would like to use, and we will set it.
* If other staff members do not have an email address registered, we ask the representative to register them.
Please note
- We will never send new passwords by email. Your support representative will tell you the password via Google Chat after the representative contacts us.
- Suspicious emails pretending to be password changes or confirmations may arrive. Do not log in from links in emails; access WASABI SWITCH the way you usually do.
- Two-step verification codes are sent to the registered email address. If you have not yet changed your email account password as requested in the third report, please do so as well.
Request to stores using STOCK SWITCH
Because the update has not yet reached the official apps distributed in the app stores, please use the development-environment apps until the official version is updated.
We will announce when the official version will be updated once it is decided.
We apologize for the inconvenience and appreciate your understanding.
Target apps and installation links
[POS Register SWITCH] (iPhone / iPad)
- TestFlight master: https://testflight.apple.com/join/bQeWEE2D
[STOCK SWITCH]
- iPhone (TestFlight): https://testflight.apple.com/join/2dOTf35I
- Android (DeployGate): https://dply.me/ikzi2c
How to install
[iPhone / iPad (TestFlight)]
1. Install "TestFlight" (official Apple app, free) from the App Store
2. Open the link above on your device
3. Tap "Start Testing" (or "Accept"), then tap "Install"
4. After installation, launch the app from TestFlight or the home screen
[Android (DeployGate)]
1. Open the link above on your device
2. Follow the on-screen instructions to download the app
3. If asked to allow "apps from unknown sources", allow it and then install
4. After installation, launch the app
If you have any questions, please feel free to contact us. Thank you for your continued support.
Disabling PHP in the template engine
The investigation found that the PHP functionality available in WASABI SWITCH's template engine (content templates) was abused in this unauthorized access.
In response, we changed the specification so that PHP can no longer be used in content templates.
Date and time
Sunday, October 18, 18:29
Impact on stores
If you use PHP in a content template, that part will no longer work after the change.
If you use templates with PHP and have any questions, please consult your support representative.
Related notices
- [Important] Warning about suspicious emails
https://wasabi-inc.biz/help/news/20261015-01/
- [Important / First report] Apology and report on the information leak caused by unauthorized access to WASABI SWITCH
https://wasabi-inc.biz/help/news/20261016-01/
- [Important / Second report] Temporary deactivation of all WASABI SWITCH accounts and request to change passwords
https://wasabi-inc.biz/help/news/20261016-02/
- [Important] Suspension of the futureshop integration
https://wasabi-inc.biz/help/news/20261016-03/
- [Important] Suspension of the SpeedPAK and Luxclusif integrations
https://wasabi-inc.biz/help/news/20261017-01/
- [Urgent / Third report] Request to change email account passwords
https://wasabi-inc.biz/help/news/20261017-03/
- [Important / Fourth report] Temporary deletion of transaction data and stronger security measures
https://wasabi-inc.biz/help/news/20261018-01/