cotta suspended credit card payments at its official online shop from 9:00, also covering Yahoo! Wallet. The company is investigating after detecting suspicious access and says that any leakage of personal information remains unconfirmed.
On 26 October 2026, cotta announced that it had temporarily suspended credit card payments at its official online shop from 9:00 that day after detecting suspicious external access. Yahoo! Wallet was also affected, and some web functions, including profile registration and recipe posting, have been suspended.
At present, the leakage of card information or personal information such as names, addresses and telephone numbers has not been confirmed. The payment suspension has been described as a security measure. The investigation is being conducted in cooperation with external specialists, and the cause and scope of the impact remain unconfirmed.
Following the payment suspension, cash on delivery and post-payment may remain available, and cotta bakery will automatically change to convenience-store post-payment. Invoice-based post-payment is also available for corporate customers, allowing orders to continue under certain conditions.
The suspension affects not only payments but also some functions, including profile registration and image posting, and no restart date has been set. Information on the conditions for resumption and alternative payment methods is expected to be provided to users, while the company continues investigating whether personal information was leaked.