PHP Vulnerability Responses by Company

R.project Co., Ltd.

Companies / web services
Aliases / services
R.project Co., Ltd. / 株式会社R.project / R.project株式会社
Official website
https://rprojectjapan.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Nappu newsletter

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

The October 28, 2026 update corrects the initial notice: all opted-in newsletter records leaked, confirmed October 27. Data included email, nickname, region, ID and usage summaries such as booking dates and cumulative spend, but not facility-specific reservations, passwords or payment data. Blastmail use ended.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Do not trust links or credential requests even when messages mention usage details; facilities should contact support through the official dashboard.

Official service URL

Source URLs

  1. 2026-10-28 Official notice about Nappu newsletterhttps://rprojectjapan.com/news/detail/58g6vma37s7/Service and operation documentation
Related official sources
  1. 2026-10-28 Official notice about Nappu newsletterOfficial notice; link to this PHP incident unconfirmedConfirms scope, chronology and user guidance.

Comments