PHP Vulnerability Responses by Company

Kurashicom

Companies / web services
Aliases / services
Kurashicom / 北欧、暮らしの道具店 / Hokuoh Kurashi / 株式会社クラシコム / Kurashicom日本
Official website
https://kurashi.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Hokuoh Kurashi no Doguten newsletter

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: official_incident_notice · Research date: 2026-10-30

Blastmail exposed newsletter email addresses registered or provisionally registered before October 21, 2026 at 00:30. Names, addresses, cards, passwords and separate order/shipping/restock notifications were excluded. Mailing migrated to a new environment. The October 29 update identifies 84 affected addresses not previously notified and 487 incorrectly notified unaffected addresses; follow-up notices were completed.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Check the October 29, 2026 follow-up or correction notice as well. The company does not request passwords or card numbers by email. Delete suspicious links/attachments without opening them and use the official inquiry form for verification.

Official service URL

Source URLs

  1. 2026-10-29: official service noticehttps://kurashi.com/news/16912Service and operation documentation
Related official sources
  1. Official operator identityOfficial information directoryIdentifies Kurashicom as the operator.
  2. 2026-10-29: official service noticeOfficial notice; link to this PHP incident unconfirmedVerifies affected data, service scope and user guidance.

Comments