Security measures and safety checks

Completed measures, items in progress and future plans are listed separately. Items under investigation are clearly distinguished from items confirmed safe.

Summary of the external investigation

An external cybersecurity firm is investigating. A summary will be posted as soon as it is available, within limits that do not help attackers.

Measures taken and planned

Completed
Identified and blocked the entry route of the October 14 access
2026年10月16日までに完了
Completed
Removed the malicious program (malware)
2026年10月16日までに完了
Completed
Temporarily deactivated all accounts; password change required on reactivation
2026年10月16日 18:00
Completed
Opened a dedicated page on this incident (background, status, warnings and FAQ)
https://incident-support.wasabi-inc.biz/
2026年10月17日
Completed
Set up a dedicated inquiry desk for this incident (form for customers and stores)
We set up an inquiry form that issues a ticket number. A phone line is being prepared.
2026年10月18日
Completed
Disabled PHP in content templates
We disabled the functionality that was abused in this unauthorized access.
2026年10月18日 18:29
In progress
Countermeasures for the October 16 access
The entry route has been identified.
In progress
Investigation by an external cybersecurity firm
Investigating the scope and impact of the leak.
結果は早ければ10月18日頃
In progress
Reporting to the Personal Information Protection Commission
2026年10月18日に速報を提出（確報は調査結果を踏まえて提出予定）
In progress
Temporary deletion of transaction information (orders, purchases, customers) until safety is confirmed
All data has been saved before deletion and will be returned to stores once organized.
2026年10月18日（日）中に実施
In progress
Forced password change for all accounts and two-step verification by email (WASABI SWITCH, STOCK SWITCH, POS Register SWITCH)
Logins are being restored in order after each store's representative contacts their support representative.
2026年10月18日 20:30〜23:30に実施
In progress
Encrypted storage of registered information (marketplace credentials, FTP accounts for integrations, email accounts, credentials in company settings, WASABI SWITCH API information)
11月の予定を前倒しし、2026年10月18日（日）中に完了予定
Planned
Introduction of multi-factor authentication for STOCK SWITCH and POS Register SWITCH
WASABI SWITCH already supports multi-factor authentication.
近日中（導入日は決まり次第お知らせします）

Safety checks before resuming the service

Checks to be performed before resuming will be posted once decided.