BuySell Technologies Group announced that information from 1,369 orders and 224 customers had been leaked following unauthorized access to the external order management service WASABI SWITCH. Cases have also been confirmed in which fake refund emails directed recipients to LINE.
BuySell Technologies Co., Ltd. and 3 group companies announced that they had confirmed an information leak caused by unauthorized access to WASABI SWITCH. The information subject to the leak consisted of 1,369 orders and 224 customer records, and the companies stated that they did not hold any credit card information.
The order information subject to the leak was limited to certain periods and stores, with multiple periods identified, including 13–16 October 2026. The sales outlets included online BuySell-affiliated stores, Yahoo! Auctions and Shopping, Rakuten Ichiba, and Mercari.
The 224 customer records were a separate category from the order information and included names, phonetic names, telephone numbers and email addresses. They may have been affected regardless of the order date or store, and the company plans to respond through individual notifications.
The suspicious emails directing recipients to LINE asked them to contact the sender via LINE under the pretext of an item being out of stock or a refund being due. Recipients have been advised that legitimate refunds are processed through official channels. Buyers have been asked to check their order histories on the official website or contact an official channel.
The group stated that it would continue its investigation, verify the security of WASABI SWITCH and review its management of outsourced service providers. Contact details for the ワサビ社 contact point and the joint contact point have also been provided.