PHP Vulnerability Responses by Company

Bushiroad

Companies / web services
Aliases / services
Bushiroad / バンドリ！アワーノーツ / BanG Dream! Our Notes / 株式会社ブシロード / 武士道
Official website
https://bushiroad.co.jp/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

BanG Dream! Our Notes beta applications and support

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: official_incident_notice · Research date: 2026-10-30

Unauthorized access at the development contractor exposed information on 10,194 beta applicants from June 25–29 and 3,034 support users from September 24–October 14, 2026, among others. Data include application emails/IPs and inquiry text/contact details where supplied. The management weakness was corrected. A player ID alone cannot enable login or account takeover.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Check the individual notification and avoid suspicious links or attachments. The company says it does not request passwords, payment-card details, PINs or direct payments by email or SMS.

Official service URL

Source URLs

  1. Official operator identityhttps://bushiroad.co.jp/media/a87298c628c65925Service and operation documentation
Related official sources
  1. Official operator identityOfficial information directoryIdentifies Bushiroad as the operator.
  2. 2026-10-27: official service noticeOfficial notice; link to this PHP incident unconfirmedVerifies affected data, service scope and user guidance.

Comments