SHINDO3

Hai Cheese! Photo

Sen

Unauthorized accessSize not disclosed

LEAK CONFIRMEDPostal address / Phone numberClosed (final report)

Open in the live monitor ▶
Disclosed
Jun 12, 2026
Leak
Leak confirmed
Type
Unauthorized access
Status
Closed (final report)
Security spend
Not checked yet
Compensation
Not announced

What leaked

IdentityNames of buyers and recipients
ContactAddress, Phone number
Employment & HRGroup (school) name

Not leaked

  • Photos, including thumbnails, were not affected

Who is affected

  • Buyers
  • Delivery recipients

Cause

The service was breached by a third party; the company says it found the cause but the article does not state it

Timeline

  1. Intrusion began
  2. Intrusion stopped
  3. Service restored
  4. Security NEXT report date

Response

  • Notified individuals
  • More monitoring
  • External audit

Reported to police and the PPC and contacted users; found the cause, checked systems, strengthened monitoring and resumed after an outside security assessment

What you should do

  1. Treat refund or apology calls and texts as scams. Call back only on the number from the official site
  2. Watch for unexpected mail or invoices; your address is hard to change
  3. You can be affected without ever using this service (parcel recipients etc.). Check any notice you receive
  4. Check the company's notice to see if you're affected

Lessons for companies

  1. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  2. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources