Important[Important / First report] Apology and report on the information leak caused by unauthorized access to WASABI SWITCH
Published: Friday, October 16, 2026, 11:11
- Friday, October 16, 2026, 13:30: added "Our efforts to strengthen security"
To stores using WASABI SWITCH
Thank you for always using WASABI SWITCH.
We have found that a third party gained unauthorized access to the WASABI SWITCH system and that information such as stores' order information was leaked to the outside.
We sincerely and deeply apologize for the great concern and inconvenience this has caused to our stores and their customers.
We report what we have found so far and the status of our response below.
Background
On October 15, 2026, a store contacted us saying that "suspicious emails are reaching our customers."
The emails contained information about actual orders and, posing as a "refund procedure," urged recipients to contact a LINE account.
Our investigation found that a third party gained unauthorized access to the WASABI SWITCH system on October 14, 2026, and that information was leaked to the outside.
We believe the suspicious emails received by customers misused this leaked information.
Status of our response
[Unauthorized access on October 14, 2026]
We identified and blocked the entry route.
We have also removed the malicious program (malware) that had been installed and completed measures to prevent recurrence.
[Unauthorized access at around 4:00 a.m. on October 16, 2026]
Separately from the above, we detected unauthorized access with a different cause at around 4:00 a.m. today.
We have already identified this entry route as well and are currently taking countermeasures.
For both incidents, our system development department is responding with all its resources, and together with an external cybersecurity firm we are investigating in detail the scope and impact of the leaked information.
Next steps
We will continue the investigation with the external firm and report promptly once the scope of the leaked information is confirmed.
We will also take all necessary actions appropriately, including reporting to the Personal Information Protection Commission and other relevant authorities.
Once again, we deeply apologize for the great inconvenience and concern this has caused to our stores and their customers.
Our efforts to strengthen security
As part of our efforts to prevent recurrence, in the version upgrade planned for November 2026 we will encrypt and store the following information registered in WASABI SWITCH:
- Authentication information for each marketplace
- FTP account information for external integrations
- Email account information
- WASABI SWITCH API information
All of this will be carried out with care so as not to disrupt stores' daily operations.
Related notices
- [Important] Warning about suspicious emails
https://wasabi-inc.biz/help/news/20261015-01/