SHINDO3

Storaka

StreetAcademy

UnknownSize not disclosed

LEAK UNCLEARCard numberInvestigating

Open in the live monitor ▶
Disclosed
Jan 20, 2026
Detected
Jan 16, 2026
Detection to disclosure
4 days
Leak
Unknown
Type
Unknown
Status
Investigating
Security spend
Not checked yet
Compensation
Not announced

What leaked

Financial & paymentCredit card information (whether leaked is under investigation)

Who is affected

  • Storaka users

Cause

Card fraud confirmed among some users; whether it is linked to a leak from the company's systems is unknown

Timeline

  1. Payment processor reported a suspected link
  2. Card payments suspended
  3. Reported to authority
  4. Consulted the police
  5. Security NEXT report date

Response

  • Service stopped
  • Forensic investigation
  • Phishing warning

Suspended card payments and opened a forensic investigation with outside help; asked users to check statements and offered other payment methods

What you should do

  1. Call your card issuer, reissue the card, check statements daily and turn on alerts
  2. Check the company's notice to see if you're affected

Lessons for companies

  1. Don't keep ID or bank data: delete after checks or use a KYC provider
  2. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  3. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources