PHP Vulnerability Responses by Company

ROHTO Pharmaceutical Co., Ltd.

Companies / web services
Aliases / services
ROHTO Pharmaceutical Co., Ltd. / ロート製薬株式会社 / 乐敦制药株式会社
Official website
https://www.rohto.co.jp/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Mail-order customer support and management

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

The September 15, 2026 update reports possible unauthorized acquisition of mail-order call recordings, associated information and customer-management data. Scope, counts and affected individuals remained under investigation; no major business impact was confirmed. It reported to the privacy regulator and added a dedicated inquiry form October 22.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Do not provide card data, PINs or passwords for supposed repeat payments, refunds or verification. Use the official dedicated contact, not links or numbers in suspicious messages.

Official service URL

Source URLs

  1. 2026-09-15 Official Mail-order customer support and management noticehttps://www.rohto.co.jp/news/whatsnew/2026/0915_01Service and operation documentation
Related official sources
  1. 2026-09-15 Official Mail-order customer support and management noticeOfficial notice; link to this PHP incident unconfirmedConfirms scope, chronology and user guidance.

Comments