2026-11-13
Unauthorized access to Shiseido's skin analysis system (2,515 records): names, email addresses, questionnaire data and skin measurement results leaked — what users should do
On November 6, 2026, Shiseido announced that an outside third party had gained unauthorized access to the online skin analysis system "Facial Condition Analyzer (FCA)" used by its group's skin measurement services, and that some personal information had leaked. It confirmed the unauthorized access on October 27 and suspended some services from that day. The investigation found that some information in the system had been altered and data had been taken outside. A total of 2,515 records leaked: name, email address, age, gender, member ID, questionnaire data and skin measurement results (including date and time). Face images taken during measurement are not included, and the system does not handle credit card information. Two services where a leak was confirmed and five more services that use the same system are suspended as a precaution; no restart date is set. Shiseido has reported the matter to the Personal Information Protection Commission and the police, and the cause and scope are under investigation. As of November 13, 2026, no follow-up notice had been found. This site's conclusion: users should not respond to emails in the name of Shiseido or its brands, and should check whether they have used these skin measurement services.