Science & Tech · Cybersecurity · 12 hrs ago
DHC says unauthorized access changed information in 5,096 accounts
DHC said its online shop was accessed without permission, and information was changed in 5,096 member accounts.
The Japanese cosmetics and health products company discovered the activity on October 28.
The affected information may have been viewed, including names, addresses, phone numbers and purchase histories; only the last four digits of payment cards were held by DHC.
The company found 27 suspicious orders and 71 unauthorized registrations, and said it cancelled the orders and removed the registrations.
DHC has not confirmed that information was taken outside its systems or that customers suffered further harm.
It blocked the source of the access, fixed the exploited weakness and restored the changed account information.
DHC says it will contact affected customers individually and continue monitoring for further unauthorized access.
DHC said unauthorized access changed member information in 5,096 accounts on its online shop.
The company said the affected information may have been viewed, but it had found no evidence that data was taken externally or of secondary harm.
It also found 27 suspicious orders and 71 unauthorized new account registrations.
DHC said it had restored the changed information, blocked communications from the source of the access and addressed the exploited vulnerability.
- Who
- DHC, a cosmetics and health-food company, and an unidentified third party.
- What
- Unauthorized access changed member information in 5,096 accounts. DHC also found suspicious orders and unauthorized new registrations.
- When
- DHC confirmed the access and changes on October 28, 2026, and announced them on October 30.
- Where
- DHC’s official online shop.
- Why
- Not stated
This story does not have two clearly opposing sides.
DHC confirmed unauthorized access and changes to member information.
DHC announced the incident and said 5,096 accounts had been affected.
DHC restored changed information, blocked communications from the access source and addressed the vulnerability.
- Changed accounts
- 5,096
- Suspicious orders
- 27
- Unauthorized new registrations
- 71
- Possible information viewed
- Names, addresses, phone numbers, purchase histories and the last four digits of credit card numbers
- Possible affected delivery addresses
- Up to 5,520
3 sources
What people are saying
We deeply apologize once again for causing our customers great concern and inconvenience.