PHP Vulnerability Responses by Company

FANCL CORPORATION

Companies / web services
Aliases / services
ファンケル / FANCL / 芳珂 / FANCL CORPORATION / 株式会社ファンケル / 株式会社ファンケル（FANCL）
Official website
https://www.fancl.co.jp/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

FANCL official e-commerce site / member data

Response status
Not listed
Response information checked
2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

Disclosed 393,785 leaked member records affecting 368,184 people. The responsible feature was disabled; the October 16 notice reported no business/service impact. No PHP connection or completed PHP fix is stated.

Scope: The PHP connection and response to the current PHP vulnerabilities are not listed. Incident or operational updates do not establish PHP remediation.

What users should do

Check the affected-user notification described in the official FAQ. Beware of suspicious email, SMS, calls and links. The company advises regular password changes; use the shared enquiry contact in the official FAQ.

Official service URL

Source URLs

  1. Joint data-breach disclosure, October 16https://www.fancl.jp/news/pdf/20261016_1.pdfService and operation documentation
  2. Official breach FAQhttps://faq.fancl.co.jp/faq/show/152298?site_domain=defaultService and operation documentation
Related official sources
  1. Company informationOfficial information directoryIdentifies the service operator, separately from other group companies.
  2. Joint data-breach disclosure, October 16Official notice; link to this PHP incident unconfirmedReports separate affected counts and actions for each company; attack details are undisclosed.
  3. Official breach FAQOfficial notice; link to this PHP incident unconfirmedIndividual email notification, phishing precautions and shared enquiry contact.

Comments