2026-10-31
GETTIIS Member Data Breach (317,971 member IDs): What Leaked and What Members Should Do
On October 19, 2026, Linkstation Inc. (Japan) announced that GETTIIS member information had leaked after unauthorized access, and on October 20 it published a second report with counts per item. According to the company, between about 0:00 and 7:00 on October 18 a third party exploited a vulnerability in the program of Gettii-Lite, a performance-registration service for organizers, and obtained GETTIIS member data. The counts are per item, not a total number of people: member IDs 317,971; hashed passwords 311,451; email addresses 311,426; names 309,759; phone numbers 309,668; card-related information 29,515 (the first and last four digits, cardholder name and expiry date, encrypted); gender 5,900; dates of birth 5,192; postal codes 489. The company says it does not store full card numbers or security codes, that the leaked data alone cannot be used for card payments, and that passwords were stored as hashes. This site's conclusion: change the GETTIIS password and any other password you reused, and treat messages that use your name and phone number as suspect, because those two items were leaked for about 310,000 records each.