Science & Tech · Cybersecurity · 4 hrs ago
Seiko suspends wishlist feature after Swym security incident
Seiko suspended its wishlist feature on three Japanese online stores after a security incident involving software provider Swym.
The affected stores are Grand Seiko Boutique Online, Seiko Online Store and Seiko Clock Online Store.
Swym says an unauthorised change on 14 October caused malicious code to load on some pages at a limited number of online stores.
The code could redirect shoppers from checkout buttons to fake payment pages, where people who entered card details may have exposed them.
Seiko has not confirmed that its stores were affected or that any customer information was leaked.
The company is investigating, and it has not said when the feature will return; it will provide further updates if it finds more information.
Seiko suspended its wishlist feature on three Japanese online stores after a security incident involving software provider Swym.
The company removed Swym’s Wishlist Plus application as a precaution on 30 October 2026.
Seiko has not confirmed whether its stores were affected by malicious checkout redirects or whether any customer information was exposed.
Swym said an unauthorised party altered its application configuration on 14 October, allowing malicious code to load on some pages of a limited number of stores.
Seiko has not announced when the wishlist feature will return.
- Who
- Seiko suspended the feature; the incident involved third-party provider Swym.
- What
- Seiko removed Wishlist Plus from its online stores as a precaution. The feature is unavailable while the company investigates.
- When
- Seiko announced the suspension on 30 October 2026; the unauthorised configuration change occurred on 14 October.
- Where
- Grand Seiko Boutique Online, Seiko Online Store and Seiko Clock Online Store in Japan.
- Why
- Swym reported a security incident in which an unauthorised party modified its application configuration, causing malicious code to load on some online-store pages.
This story does not have two clearly opposing sides.
An unauthorised party modified Swym’s application configuration between 10:06 and 11:56 UTC, according to Swym.
Swym began deploying fixes at 15:02 UTC and completed the rollout at 16:32 UTC.
Swym published a security FAQ explaining how the malicious code targeted checkout-button interactions.
Seiko announced that it had removed Wishlist Plus from three Japanese online stores as a precaution.
- Affected stores
- Grand Seiko Boutique Online, Seiko Online Store, Seiko Clock Online Store
- Third-party provider
- Swym
- Application
- Wishlist Plus
- Configuration change
- 14 October 2026, between 10:06 and 11:56 UTC
- Fix rollout
- 14 October 2026, from 15:02 to 16:32 UTC
- Seiko suspension announcement
- 30 October 2026