Important[Urgent / Third report] Request to change email account passwords
Published: October 17, 2026, 20:08
Updated: October 18, 2026, 15:02
What changed: In addition to the "SMTP authentication password", the "POP password" has been added to the passwords to change.
To stores using WASABI SWITCH
Thank you for always using WASABI SWITCH.
Regarding the information leak due to unauthorized access, we have asked stores to take many actions, and we sincerely thank you for your cooperation.
This notice reports a new unauthorized access to WASABI SWITCH.
We also have items that we urgently ask stores to act on, so please review the following.
We deeply and sincerely apologize once again for the great concern and inconvenience caused to stores and their customers.
About the newly confirmed unauthorized access
Our investigation confirmed unauthorized access through a route different from the October 14 incident.
The attacker used leaked administrator passwords to log in to the admin screens of some stores and abused admin-screen functions to install a malicious program.
As a result, we have confirmed that part of the order data from October 17 was extracted.
- Around 3:00 a.m. on October 16: unauthorized logins to the admin screens of some stores and installation of a malicious program
- Around 1:25 p.m. to 3:07 p.m. on October 17: unauthorized logins to the admin screens of multiple stores, installation of a malicious program, and extraction of order data and email account information
We have also reconfirmed that the vulnerability that caused the October 14 unauthorized access has been fixed and that the fix is in effect in the system.
What we found
Based on information provided by stores, we found that the email account information registered under "Mail > Account management" in WASABI SWITCH was extracted, and that suspicious emails are being sent from stores' official email addresses.
We deeply apologize for the great trouble this has caused to stores and their customers.
The email reads as follows (Japanese original, translated):
-------------------------
Important notice
Additional confirmation is required regarding emails sent from your account.
The system shows that a reply was sent from your own account to an email sent from that same account.
The current record is as follows:
Sender: your account
Target email: email sent from your account
Replied from: your account
Status: awaiting confirmation
Whether or not you recognize this reply, please check the details from the link below.
Check the reply
After checking, you can review the related account activity.
Check account activity
This notice will remain on your account until the confirmation is completed.
This notice is automatically generated based on email sending and reply information confirmed on the account.
[Link] Security Team
What we ask of stores (urgent)
To prevent further damage, please change the passwords of the email accounts registered under "Mail > Account management" (the "SMTP authentication password" and the "POP password") in the admin screen of your email service.
* When changing them, do not set the same password for the "SMTP authentication password" and the "POP password".
* Even if you have not registered a "POP password", if it is the same as the "SMTP authentication password", be sure to change it.
If you cannot change the password immediately, change the password of the email account registered under "Mail > Account management" in WASABI SWITCH to a random string different from the real password.
* After changing the password, never register the password in WASABI SWITCH until the "encryption" described below has been completed.
Password to change: Mail > Account management > "Settings" > [SMTP authentication password]
If possible, please also check the following:
- Whether there are any emails you do not recognize in the sending history of the email account
- Whether settings such as automatic forwarding have been added or changed without your knowledge
If you find any suspicious sending, please inform our support department of the sending date/time, subject, etc.
About encryption of information
The mechanism for encrypting and storing information registered in WASABI SWITCH, originally planned for the November version upgrade, will be brought forward and applied urgently.
Planned for Sunday, October 18 (changed from the original plan of Saturday, October 17)
We will announce the exact date and time separately.
We apologize for the inconvenience and burden and appreciate your cooperation.
Related notices
- [Important] Warning about suspicious emails
https://wasabi-inc.biz/help/news/20261015-01/
- [Important / First report] Apology and report on the information leak caused by unauthorized access to WASABI SWITCH
https://wasabi-inc.biz/help/news/20261016-01/
- [Important / Second report] Temporary deactivation of all WASABI SWITCH accounts and request to change passwords
https://wasabi-inc.biz/help/news/20261016-02/
- [Important] Suspension of the futureshop integration
https://wasabi-inc.biz/help/news/20261016-03/
- [Important] Suspension of the SpeedPAK and Luxclusif integrations
https://wasabi-inc.biz/help/news/20261017-01/