PHP Vulnerability Responses by Company

Lindt & Sprüngli Japan

Companies / web services
Aliases / services
リンツ / Lindt Japan / リンツ&シュプルングリージャパン株式会社 / Lindt & Sprüngli Japan / 瑞士莲日本
Official website
https://www.lindt.jp/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Lindt shop/app shared membership

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: official_incident_notice · Research date: 2026-10-30

A vendor attack exposed 3,147,469 member records including hashed passwords, excluding card data. Passwords were reset on 26 October 2026; new logins remain unavailable pending shop reopening.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Reset the password after reopening and change reused passwords elsewhere. Check the notice before uninstalling a logged-in app: reinstalling and signing in are unavailable during the closure.

Official service URL

Source URLs

  1. Official operator identityhttps://www.lindt.jp/contents/chocolat-cafe/notice_20261023/Service and operation documentation
Related official sources
  1. Official operator identityOfficial information directoryIdentifies Lindt & Sprüngli Japan as the operator.
  2. Updated 2026-10-26: official service noticeOfficial notice; link to this PHP incident unconfirmedVerifies affected data, service scope and user guidance.

Comments