PHP Vulnerability Responses by Company

BOOKOFF CORPORATION LIMITED

Companies / web services
Aliases / services
ブックオフ / BOOKOFF / BOOKOFF CORPORATION LIMITED / ブックオフコーポレーション株式会社
Official website
https://www.bookoff.co.jp/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

BOOKOFF app, online store and web membership

Response status
Not listed
Response information checked
2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

The 23 October 2026 FAQ describes possible disclosure of membership names, contact information, IDs and password hashes. Not all fields apply to every member. Card data, buyback identity images and bank-account details are excluded.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Check affected status through the official member portal and change passwords directly in the official app or site. Change identical or similar passwords elsewhere and avoid suspicious links.

Official service URL

Source URLs

  1. Data breach FAQ (23 October 2026)https://ssl4.eir-parts.net/doc/9278/ir_material10/287328/00.pdfService and operation documentation
Related official sources
  1. Official operator informationOfficial information directoryOfficial evidence identifying BOOKOFF CORPORATION LIMITED and the relevant business.
  2. Data breach FAQ (23 October 2026)Official notice; link to this PHP incident unconfirmedThe 23 October 2026 FAQ describes possible disclosure of membership names, contact information, IDs and password hashes.

Comments