PHP Vulnerability Responses by Company

HANKYU HANSHIN DEPARTMENT STORES, INC.

Companies / web services
Aliases / services
阪急阪神百貨店 / 阪急百貨店 / 阪神百貨店 / Hankyu Hanshin Department Stores / HANKYU HANSHIN E-STORES / Remo Order / リモオーダー / HANKYU HANSHIN DEPARTMENT STORES, INC. / 株式会社阪急阪神百貨店
Official website
https://www.hankyu-hanshin-dept.co.jp/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Hankyu / Hanshin reservation site

Response status
Not listed
Response information checked
2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

Suspended October 16; the site still displayed a suspension notice on October 29.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed. The incident and operational notices below do not establish PHP causation or remediation.

What users should do

Check the reservation site for reopening notices.

Official service URL

Source URLs

  1. Joint intrusion disclosure, October 19https://data.swcms.net/file/h2o-retailing/ja/news/auto_20261019552921/pdfFile.pdfService and operation documentation
  2. Reservation-site suspensionhttps://reserve.hankyu-hanshin-dept.co.jp/maintenanceService and operation documentation

HANKYU HANSHIN E-STORES

Response status
Not listed
Response information checked
2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

Suspended October 17 and still showing maintenance on October 29. Possible order-data leakage remained under investigation in the October 19 notice.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed. The incident and operational notices below do not establish PHP causation or remediation.

What users should do

Check the official store for reopening information.

Official service URL

Source URLs

  1. Joint intrusion disclosure, October 19https://data.swcms.net/file/h2o-retailing/ja/news/auto_20261019552921/pdfFile.pdfService and operation documentation
  2. E-STORES maintenance noticehttps://web.hh-online.jp/Service and operation documentation

Remo Order

Response status
Not listed
Response information checked
2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

The October 19 notice reports suspension since October 17; checked sources do not announce reopening.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed. The incident and operational notices below do not establish PHP causation or remediation.

What users should do

Confirm availability with the official contact.

Official service URL

Source URLs

  1. Joint intrusion disclosure, October 19https://data.swcms.net/file/h2o-retailing/ja/news/auto_20261019552921/pdfFile.pdfService and operation documentation
Related official sources
  1. Company profileOfficial information directoryOfficial evidence identifying the operating company.
  2. Joint intrusion disclosure, October 19Official notice; link to this PHP incident unconfirmedChecked for service scope and user guidance; not evidence of PHP remediation.
  3. Reservation-site suspensionOfficial notice; link to this PHP incident unconfirmedChecked for service scope and user guidance; not evidence of PHP remediation.
  4. E-STORES maintenance noticeOfficial notice; link to this PHP incident unconfirmedChecked for service scope and user guidance; not evidence of PHP remediation.

Comments