Good Smile Company has confirmed that an unauthorized third party accessed customer information from its online store between October 19 and October 22, 2026, in a data breach the company says it discovered on October 23.
Good Smile Company (Credits: Good Smile Company)
Good Smile Company Data Breach: What Information Was Accessed
According to the company’s announcement, the exposed information includes member names, gender, addresses, email addresses, phone numbers, and order information. Some credit card details were also involved, including the card brand, the last four digits of the card used, and the expiration date.
Crucially, the company stressed what was not taken. The cardholder’s name, any card digits beyond the last four, and the security code were not included in the accessed data, which limits — but does not erase — the risk to affected shoppers.
Good Smile Company Response to the Online Store Breach
Good Smile took its online store down as soon as the breach was discovered on October 23, and the announcement confirms an earlier preliminary notice issued that same week. The company says it has since strengthened its system security and removed the vulnerability it identified as the cause of the incident.
The incident has also been reported to Japan’s Personal Information Protection Commission, in line with Japanese law, while the investigation continues. For fans, the timing stings: Good Smile is best known for its Nendoroid and Figma figure lines, the super-deformed collectibles and highly articulated action figures that anchor countless anime and pop-culture collections.
Customers who ordered through the Good Smile online store during the affected window should keep an eye on official company communications and watch for any unusual account activity, even though full card numbers were not exposed.
Also Read: Hatsune Miku Connecting Puzzle TAMAGOTORI Deluxe Game Launches on October 29
Source: Anime News Network — read the full story there.
