GMOペイメントゲートウェイ disclosed unauthorized activity in an issuing support function provided to Life Card, with information from a total of 69 accounts, including customer information, potentially stolen. The incident occurred on 30 October and was formally disclosed on 2 November.
GMOペイメントゲートウェイ disclosed unauthorized activity in a specific function of its issuing support service for Life Card. The affected information relates to 69 accounts in total and may include 3 records containing basic information such as names and contact details, as well as V Preca numbers, dedicated security codes and expiry dates. The incident occurred on 30 October 2026 and was disclosed on 2 November 2026. Part of the affected function has been suspended while security is verified and countermeasures are implemented. The company plans to contact affected individuals individually through Life Card.
The breakdown is 63 records containing names, email addresses, telephone numbers and partial addresses; 3 records containing V Preca numbers, dedicated security codes and expiry dates; and 3 records containing portions of V Preca numbers, for a total of 69 records. The reference to 69 records indicates the scope of information that may have been stolen and does not mean that the information of every individual was confirmed to have been stolen. A warning has been issued because the 3 V Preca-related records could potentially lead to unauthorized use.
Since that date, the GMO group has disclosed a succession of information security incidents involving other services. These are separate from the present incident involving 69 records, and the causes and impacts differ by incident. The company explained that there is currently no impact on other services.
Life Card has also disclosed the possibility of information leakage involving another outsourced provider, potentially affecting 339,610 contracts. That is a separate incident involving a different outsourced provider, system and disclosure items, and should not be confused with the present incident. Users are asked to check through official notification channels and contact the official support desk if they find any suspicious transaction history.