2026-11-15
Unauthorized access at Snow Peak (reuse buyback 24,948, event reservations 5,923, community app 21,553): bank transfer details and more may have leaked — what affected customers should do
On November 13, 2026, Snow Peak announced unauthorized access by a third party to several online services. For the reuse buyback service, 24,948 people (still under investigation) may be affected: in addition to name, address and date of birth, the bank account information used for payouts (bank name, branch, account type, account number and account holder name) may have leaked. For the event reservation system, data on 5,923 people may have leaked, including applicants' and companions' names and application details. For the community app, 21,553 people may be affected, and the data is the member number, display name, self-introduction text and cover image. The company attributes each to a vulnerability in the service. Credit card information and passwords are not included (for event reservations, leakage has not been confirmed). Separately, unauthorized logins using IDs and passwords that appear to have been obtained elsewhere were confirmed on up to 445 accounts of the official online store and official member app. The counts are separate figures for each service, and no combined total has been announced. The company says no secondary damage has been confirmed and has suspended four services (the online store was due to reopen on November 13; whether it has reopened is unconfirmed). As of November 15, 2026, no follow-up has been found. Our conclusion: if you used the reuse buyback service, check your bank account's transactions and be ready for contact that pretends to be the company, a bank, or a payment.