Treasure Factory

Companies / web services

Aliases / services: Treasure Factory / トレファク / トレファク引越 / 株式会社トレジャー・ファクトリー / Treasure Factory日本
Official website: https://www.treasurefactory.co.jp/

Sources identifying the operating company

https://www.treasure-f.com/info/detail/st825/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Home collection and Trefac moving application management

Response status: Not listed
Response information checked: 2026-10-30

Current re-audit: official_incident_notice · Research date: 2026-10-30

On October 20, 2026 the company confirmed theft of customer and related information from its application-management system and stopped external access and applications. Store and official-app customer records were separately managed and excluded. It attributed the issue to a database-access vulnerability and explicitly ruled out the recently announced PHP vulnerability. October 28 reopening was a plan in this notice.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Do not open unexpected links or attachments or enter passwords/card details on linked sites. Verify suspicious callers using contact details you obtain independently from the claimed organization.

Official service URL

https://www.treasurefactory.co.jp/

Source URLs

Official operator identityhttps://www.treasure-f.com/info/detail/st825/Service and operation documentation

Related official sources

Official operator identityOfficial information directoryIdentifies Treasure Factory as the operator.
2026-10-23: official service noticeOfficial notice; link to this PHP incident unconfirmedVerifies affected data, service scope and user guidance.