株式会社ペルソナ（PERSONA）
- Aliases / services
- ペルソナ / PERSONA / ペルソナSTACIAカード / Persona STACIA / 株式会社ペルソナ（PERSONA） / 株式会社ペルソナ
- Official website
- https://www.persona.co.jp/
Sources identifying the operating company
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
Persona newsletters and email notices
- Response status
- Not listed
- Response information checked
- 2026-10-29
Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29
Possible disclosure of 28,052 email addresses from some November 2024–February 2026 joiners in Cuenote FC. Mailing was suspended again on October 26.
Scope: A PHP connection and response to the current PHP vulnerabilities are not listed. The incident and operational notices below do not establish PHP causation or remediation.
What users should do
Individual notifications are planned. Beware of suspicious email; the notice limits this dataset to email addresses.
Official service URL
Source URLs
- Persona email-data joint disclosure, October 28https://www.h2o-retailing.co.jp/ja/news/news3907232089918425776/main/0/link/PERSONA_20261028.pdfService and operation documentation
Persona website
- Response status
- Not listed
- Response information checked
- 2026-10-29
Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29
On October 29 the site was suspended for preventive security maintenance. Its notice says no intrusion or leak associated with that maintenance has been identified.
Scope: A PHP connection and response to the current PHP vulnerabilities are not listed. The incident and operational notices below do not establish PHP causation or remediation.
What users should do
For lost cards, theft or misuse, use the official procedure link on the suspension page.
Official service URL
Source URLs
- Official website suspension noticehttps://www.persona.co.jp/Service and operation documentation
Related official sources
- Persona email-data joint disclosure, October 28Official information directoryChecked for service scope and user guidance; not evidence of PHP remediation.
- Official website suspension noticeOfficial notice; link to this PHP incident unconfirmedChecked for service scope and user guidance; not evidence of PHP remediation.
Comments