PHP Vulnerability Responses by Company

Horai

Companies / web services
Aliases / services
Horai / 千本松牧場 / Senbonmatsu Farm / ホウライ株式会社 / Horai日本
Official website
https://www.horai-kk.co.jp/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Senbonmatsu Farm online-shop member emails

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: official_incident_notice · Research date: 2026-10-30

The October 23, 2026 notice reports: The Blastmail investigation covers up to 10,000 Senbonmatsu Farm online-shop member names and emails. Payment-card data were excluded. This ceiling is not a confirmed leak count. Mail delivery through Blastmail was stopped.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Avoid suspicious links or attachments impersonating the company, farm or partners. Verify concerns through the official inquiry form.

Official service URL

Source URLs

  1. Official operator identityhttps://www.horai-kk.co.jp/topics/info_20261023_news.pdfService and operation documentation

Golf point-card member emails

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: official_incident_notice · Research date: 2026-10-30

The October 23, 2026 notice reports: Up to 65,000 names, emails, birth dates and prefectures were potentially exposed through Blastmail. Payment-card data were excluded and actual exposure was unconfirmed.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Avoid suspicious links or attachments impersonating the company, farm or partners. Verify concerns through the official inquiry form.

Official service URL

Source URLs

  1. Official operator identityhttps://www.horai-kk.co.jp/topics/info_20261023_news.pdfService and operation documentation

Horai newsletter members

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: official_incident_notice · Research date: 2026-10-30

The October 23, 2026 notice reports: Up to 140 names and emails were under investigation for possible exposure. This is a maximum, not a confirmed count.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Avoid suspicious links or attachments impersonating the company, farm or partners. Verify concerns through the official inquiry form.

Official service URL

Source URLs

  1. Official operator identityhttps://www.horai-kk.co.jp/topics/info_20261023_news.pdfService and operation documentation
Related official sources
  1. Official operator identityOfficial information directoryIdentifies Horai as the operator.
  2. 2026-10-23: official service noticeOfficial notice; link to this PHP incident unconfirmedVerifies affected data, service scope and user guidance.

Comments