Potential Unauthorized Access to the Square Enix Official Goods Online Shop

It has come to our attention that a server hosting our Official Goods Online Shop service for our character goods (the “Service”), which is located in Tokyo, Japan (the “Server”), was in a vulnerable situation where an unauthorized access to the Server was possible. To this point, we have identified the evidence that the non-financial personal data stated below have been compromised by the unauthorized access to the server.

The Server is used for hosting of the Service only, and is operated by a third-party contractor. Therefore, any other online services provided by us have not been affected by this incident. In addition, we have not used the third party contractor except for the management of the Server, and have not allowed them to have access to any other data.

The information compromised from the Server is as follows.

Customer information that is necessary for a user to register with the Goods Online Shop service such as;
- Name,
- Home address,
- Phone number,
- Gender,
- Date of birth, and
- E-mail address.

Credit card number and its expiration date that are registered in the Service were also stored in the server in question, however, no evidence that these information have been compromised was found at this point.

In response, the Official Goods Online Shop will end its online shopping service. We will update you about the future service as soon as it is determined.

We will make every effort to make sure that this kind of incident does not reoccur, not only in our information systems, but also outside systems operated by third-party contractors.

We sincerely apologize for any inconvenience that may be caused by this incident.

Square Enix Official Goods Online Shop
SQUARE ENIX CO., LTD.