According to Anime News Network, Good Smile Company announced that an unauthorized party accessed personal data via a malicious program installed on its website. The firm reports this program operated on the payment page between October 21 at 1:55 p.m. JST and October 23 at 7:00 a.m. JST. During this timeframe, 2,800 individuals may have had their full 16-digit card numbers, expiration dates, security codes, and names compromised. Beyond these records, the company estimates that 402,466 entries containing partial card data—specifically the last four digits and expiration dates—were potentially exposed. Furthermore, 7,673 customers who placed orders on October 22 may have had their shipping addresses, billing contact information, email addresses, and order contents accessed. The company has contacted affected parties, notified the Personal Information Protection Commission in Japan, and stated that it has since patched the vulnerability and enhanced system security.