Studio社 announced that unauthorized access by a third party to Studio, the service provided by Studio社, may have resulted in the exposure of personal information held by ExaWizards. Information from the affected forms may be within the scope of the incident, and Studio社 is proceeding with its investigation and response.
On 16 October 2026, Studio社 announced that third-party unauthorized access to the no-code website creation and management service Studio had been disclosed. According to the announcement, unauthorized access exploiting a vulnerability occurred from 30 September through 1 October 2026, and information within the service may have been transmitted outside the service. Although no actual acquisition of the information has been confirmed at this time, Studio社 is proceeding with its response because it cannot rule out the possibility that information was exposed.
The affected information consists of personal information stored in Web forms operated by ExaWizards on Studio, including information from forms active between August 2020 and 2024. Specifically, this includes email addresses, names, inquiry details, document download information and surveys. Individual notifications were sent to the relevant individuals on 19 October 2026.
As part of ExaWizards' response, the deletion of data stored on Studio and the suspension of its inquiry Web forms were confirmed. ExaWizards also implemented preventive measures, including changing the Studio account password and disconnecting integrations. ExaWizards plans to continue monitoring the status of Studio's investigation and provide appropriate guidance if any new material information comes to light.
No unauthorized use of the information or secondary harm has been confirmed at this time, and the affected customers have been warned to remain vigilant against phishing and similar threats.