PHP Vulnerability Responses by Company

エイチ・ツー・オー リテイリング株式会社（H2O Retailing）

Companies / web services
Aliases / services
H2Oリテイリング / H2O Retailing / エイチツーオーリテイリング / H2O ID / H2OID / エイチ・ツー・オー リテイリング株式会社（H2O Retailing） / エイチ・ツー・オー リテイリング株式会社
Official website
https://www.h2o-retailing.co.jp/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

H2O ID shared member account

Response status
Not listed
Response information checked
2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

Disclosed partial leakage of about 1.26 million H2O ID member records, with email notifications planned.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed. The incident and operational notices below do not establish PHP causation or remediation.

What users should do

Use the official contact for guidance and beware of suspicious messages, calls and links.

Official service URL

Source URLs

  1. Joint H2O ID disclosure, October 19https://data.swcms.net/file/h2o-retailing/ja/news/auto_20261019552921/pdfFile.pdfService and operation documentation
Related official sources
  1. H2O ID membership termsOfficial information directoryOfficial evidence identifying the operating company.
  2. Joint H2O ID disclosure, October 19Official notice; link to this PHP incident unconfirmedChecked for service scope and user guidance; not evidence of PHP remediation.

Comments