SHINDO3

Weleda Japan Co., Ltd.

Unauthorized accessSize not disclosed

POSSIBLE LEAKPayment data (unspecified)Investigating

Open in the live monitor ▶
Disclosed
Jul 3, 2026
Leak
Leak possible
Type
Unauthorized access
Status
Investigating
Security spend
Measures, no amount
Compensation
Not announced

What leaked

UnspecifiedPersonal information
Financial & paymentCredit card payment data

Who is affected

  • Customers who previously paid by credit card

Cause

The official online shop's systems were compromised through unauthorized third-party access

Timeline

  1. Credit card payments suspended
  2. Per the notice URL date and summary articles
  3. Security NEXT reported an update on July 29

Response

  • Service stopped
  • Forensic investigation

Part of the network taken offline and card payments suspended. Investigation with outside experts. Subscription shipments delayed

What you should do

  1. Check the company's notice to see if you're affected

Lessons for companies

  1. Don't keep ID or bank data: delete after checks or use a KYC provider
  2. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  3. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources