SHINDO3

Gpoint

G-PLAN INC.

gpoint.co.jp

Member identifiersup to70,000records

POSSIBLE LEAKMember / user IDUnauthorized access · Investigating

Open in the live monitor ▶
Disclosed
Sep 30, 2026
Detected
Sep 25, 2026
Detection to disclosure
5 days
Leak
Leak possible
Type
Unauthorized access
Status
Investigating
Security spend
Measures, no amount
Compensation
Compensation offered
Corporate number
6010001072734

What leaked

Account dataMember identifiers

How many

  • Member identifiers up to 70,000 records

Who is affected

  • Members

Cause

Unauthorized external access to the Gpoint system (cause under investigation)

Timeline

  1. Detected
  2. Service suspended
  3. First disclosure
  4. Company issued an update

Response

  • Blocked the entry point
  • Service stopped

System shut down and external access blocked; investigating the cause and scope of impact

What you should do

  1. Check the company's notice to see if you're affected

Lessons for companies

  1. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  2. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources