Notice and Apology Regarding the GETTIIS Member Data Breach Due to Unauthorized Access (Initial Report)

Important

Notice and Apology Regarding the GETTIIS Member Data Breach Due to Unauthorized Access (Initial Report)

2026/10/19

Link Station Co., Ltd.

We have confirmed that unauthorized access by a third party occurred to the servers of our ticket sales service "Gettii-Lite," resulting in the leakage of member information of "GETTIIS," which is managed by our company.

* "Gettii-Lite" is a performance registration service for organizers, while "GETTIIS" is a ticket purchase service for customers.

Please note that "Gettii" and "Gettii-EC" operate in a different system environment than "Gettii-Lite," and no impact from this issue has been observed.

We sincerely apologize for the great inconvenience and concern we have caused to our customers and all those involved.

We are currently investigating the full extent of the damage and its impact. The information we have gathered so far is as follows:

1. Circumstances of Discovery

On October 18, 2026, we detected suspicious access to our system and initiated an investigation. As a result, it was discovered that in the early hours of the same day, a third party may have exploited a vulnerability in the "Gettii-Lite" program to obtain "GETTIIS" member information.

2. Information to be covered

The information affected in this case is "GETTIIS" member information. Currently, the information that has been leaked or may have been leaked includes the following:

Member ID, name, phone number, email address, postal code, gender, date of birth
hashed password
Encrypted information containing part of the credit card number (first 4 digits and last 4 digits), name, and expiration date.

*We do not store your complete card number or security code.

The information leaked this time alone is not sufficient to process credit card payments.

The information affected will vary depending on your registration details. We are continuing to investigate the scope and number of affected customers and the impact on information other than that mentioned above.

3. Current status of response

We have completed the switchover of the target server and the implementation of countermeasures against the vulnerabilities used for the unauthorized access.

We will contact affected customers individually in order, based on the information we have been able to confirm.

4. A request to our customers

GETTIIS passwords are stored in hashed form, but for your security, we ask that you change your password. We will provide instructions on how to change your password in GETTIIS at a later date.

Additionally, if you are using the same password for GETTIIS on other services, please change those passwords to different ones as well.

Please be aware of suspicious emails, SMS messages, phone calls, etc., that may be taking advantage of this situation.

We will never ask for your password, credit card number, or PIN via email, phone, or any other means.

5. Future Actions

We will continue our investigation into the cause and scope of the impact, and take necessary measures, including reporting to and consulting with relevant organizations.

Any further information that becomes available or any requests we may have for our customers will be announced on this page and elsewhere.

6. Contact information for inquiries regarding this matter

Link Station Co., Ltd.

Contact: PMS Personal Information Consultation Desk

Email address: pms@linkst.jp (Reception hours: 24 hours, responses will be made in order)

We sincerely apologize once again for the great inconvenience and concern we have caused to our customers and all those involved.