PHP Vulnerability Responses by Company

istyle Inc.

Companies / web services
Aliases / services
アイスタイル / istyle / @cosme / アットコスメ / istyle Inc. / 株式会社アイスタイル
Official website
https://www.istyle.co.jp/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Newsletter delivery using Cuenote FC

Response status
Not listed
Response information checked
2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

The 23 October 2026 notice reported suspicious access traces in its Cuenote FC environment and progressive suspension from 22 October. The vendor-wide exfiltration report was distinguished from still-investigated effects on istyle customers. Card data was neither stored nor transmitted there.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Do not open suspicious email links or attachments. The company says it does not ask for passwords or card numbers by email.

Official service URL

Source URLs

  1. Mail-system unauthorized access (23 October 2026)https://www.istyle.co.jp/news/info/2026/10/20261023.htmlService and operation documentation

Preventive PHP maintenance of company systems

Response status
Preventive measures reported
Response information checked
2026-10-29

Current re-audit: Official response verified · Research date: 2026-10-29

On 22 October 2026, istyle reported preventive emergency maintenance after the PHP vulnerability announcement of 21 October and normal availability. Service-specific versions and fixes were not detailed.

Scope: Findings apply only to the specified service and sources; do not extend PHP conclusions to other services.

What users should do

The PHP notice says users need not change passwords or settings. Also review the separate mail-system incident warning.

Official service URL

Source URLs

  1. Preventive PHP measures (22 October 2026)https://www.istyle.co.jp/news/info/2026/10/1022.htmlResponse evidence
Related official sources
  1. Official operator informationOfficial information directoryOfficial evidence identifying istyle Inc. and the relevant business.
  2. Mail-system unauthorized access (23 October 2026)Official noticeThe 23 October 2026 notice reported suspicious access traces in its Cuenote FC environment and progressive suspension from 22 October.
  3. Preventive PHP measures (22 October 2026)Official noticeReports normal availability after emergency maintenance and no user tasks.

Comments