PHP Vulnerability Responses by Company

Syuppin

Companies / web services
Aliases / services
Syuppin / Map Camera / マップカメラ / GMT / BRILLER / KINGDOM NOTE / シュッピン株式会社 / Syuppin日本
Official website
https://www.syuppin.co.jp/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Marketplace orders connected through WASABI SWITCH

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: official_incident_notice · Research date: 2026-10-30

The updated notice identifies 2,269 orders through Rakuten, eBay, Yahoo! Shopping and Chrono24, plus 31 administrator accounts, following October 14–17, 2026 access to vendor WASABI SWITCH. Customer passwords and payment-card data were excluded. The company says its own Map Camera, GMT, BRILLER and KINGDOM NOTE websites do not use this system and were unaffected.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Check the marketplace and affected period against the official notice, and do not provide information in response to suspicious messages or calls. Encrypted administrator passwords were within scope; change any reused administrator password.

Official service URL

Source URLs

  1. Official operator identityhttps://www.syuppin.co.jp/news/【重要なお知らせ】委託先である株式会社ワサビ/Service and operation documentation
Related official sources
  1. Official operator identityOfficial information directoryIdentifies Syuppin as the operator.
  2. 2026-10-28: official service noticeOfficial notice; link to this PHP incident unconfirmedVerifies affected data, service scope and user guidance.

Comments