PHP Vulnerability Responses by Company

株式会社UPSIDER

Japan-based services
Aliases / services
株式会社UPSIDER / PRESIDENT CARD / 支払い.com / UPSIDER キャッシュブースト / UPSIDER
Official website
https://corp.up-sider.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

UPSIDER corporate-card systems

Response status
Affected PHP not used
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Corporate cards and payment services

October 22 reports no affected PHP and normal card use. The October 27 GRID incident notice separately reports no leak from card/payment infrastructure.

Scope: GRID website incident is separate from card infrastructure; its PHP cause is not established in the October 27 notice. The joint 22 October notice also reports other public sites patched or suspended; this is not allocated to brands whose legal operator remains unresolved.

What users should do

Beware of suspicious messages and report anomalies through official contacts.

Official service URL

Source URLs

  1. PHP impact on services and websiteshttps://corp-news.up-sider.com/261022-pr-1/Response evidence
  2. https://corp-news.up-sider.com/261027-pr-2/https://corp-news.up-sider.com/261027-pr-2/Response evidence
  3. https://corp.up-sider.com/ja/companyhttps://corp.up-sider.com/ja/companyService and operation documentation

Shi-harai.com public website

Response status
PHP patch applied
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The 22 October joint notice says the PHP-based public Shi-harai.com website was updated to a fixed version. This scope is separate from the payment platform.

Scope: The site names UPSIDER and Credit Saison as operators; their joint operation does not make them one legal entity.

What users should do

Use the service normally; contact official support for payment or account concerns.

Source URLs

  1. PHP impact on services and websiteshttps://corp-news.up-sider.com/261022-pr-1/Response evidence

GRID member website

Response status
Unauthorized-access investigation; site suspended
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

On 27 October UPSIDER disclosed leakage of current/former member information and supplied content, and suspended all member-site functions. Investigation continues; the notice does not attribute the incident to PHP2Shell.

Scope: The 22 October notice said its system did not use affected PHP. The separate 27 October incident is not confirmed PHP exploitation. Terms name UPSIDER as operator.

What users should do

Watch for suspicious email, SMS and links, and follow official investigation and reopening updates.

Source URLs

  1. https://corp-news.up-sider.com/261027-pr-2/https://corp-news.up-sider.com/261027-pr-2/Response evidence
  2. PHP impact on services and websiteshttps://corp-news.up-sider.com/261022-pr-1/Response evidence
Related official sources
  1. PHP impact on services and websitesOfficial notice
  2. Company and operator informationOfficial information directory

Comments