PHP Vulnerability Responses by Company

OpenSmile

Companies / web services
Aliases / services
OpenSmile / ワラウ / Warau / 株式会社オープンスマイル / OpenSmile日本
Official website
https://www.opensmile.co.jp/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Warau rewards service

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: official_incident_notice · Research date: 2026-10-30

The October 4, 2026 intrusion exposed Yahoo! JAPAN ID connection tokens, invalidated on October 6. The subsequent official FAQ also describes possible exposure of registration data, encrypted passwords, secret questions/answers and payout details/history. This does not mean Yahoo! JAPAN IDs or their passwords were disclosed. Warau reports service resumption on October 15 and rewards redemption on October 19.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Reset both your password and secret question/answer using the official procedure. Redemption is restricted for 24 hours after resetting. Change reused passwords or answers elsewhere; contact official support if your former email address is inaccessible.

Official service URL

Source URLs

  1. Official operator identityhttps://www.opensmile.co.jp/corp/news/note/20261015/Service and operation documentation
  2. FAQ updated October 27https://ssl.warau.jp/help/qa/2276/Service and operation documentation
Related official sources
  1. Official operator identityOfficial information directoryIdentifies OpenSmile as the operator.
  2. 2026-10-27: official service noticeOfficial notice; link to this PHP incident unconfirmedVerifies affected data, service scope and user guidance.
  3. FAQ updated October 27Official notice; link to this PHP incident unconfirmedConfirms affected information and reset restrictions.

Comments