Skip to content

Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed

Global Financial Service Disruptions

GMO Payment Gateway (Issuing Support Service for Life Card Vpreca)

payment processor · JP · East Asia · GMO Payment Gateway, Inc.

Confirmed cyberStatus: activeTier 2Severity 1 of 5Evidence confidence: mediumAnalyst-verified

GMO Payment Gateway disclosed on 2 Nov 2026 that a function it runs for Life Card's Vpreca prepaid card was used without authorization on 30 Oct, affecting 69 accounts' data, and that it suspended part of the affected services pending security checks. The exact function suspended is not named.

Original: 対象となるサービスの一部を停止し、必要な対策および安全性の確認を進めております。

First disruption
Oct 30
First public signal
Nov 2 (GMO-PG notice)
Acknowledged
Nov 2
Restored
not yet
Duration
not established
DFX first recorded
Nov 5 14:58 UTC

What was restricted

card authScope: single service

Part of the Life Card-dedicated issuing support services suspended; 69 accounts' data affected (3 with full Vpreca card data). Payment gateway and other customers' services unaffected per company.

Cause, kept in separate layers

What the institution said
Unauthorized use of a dedicated issuing support function for Life Card; part of the target services suspended for security measures and safety checks
DFX classification
Confirmed cyber (cyber: confirmed)
Wording used
必要な対策および安全性の確認を進めております
Conflicting reports
restriction_type card_auth is a best mapping; the notice does not name what was suspended.

Dependencies

A dependency is a documented relationship. It is not evidence that the provider was compromised.

  • Provider: GMO Payment Gateway (issuing support (API) provider to Life Card Vpreca), verified
  • Downstream: Life Card Vpreca prepaid card users: service function suspended; earlier DFX register notes Life Card closed 3 accounts on 31 Oct (not re-verified here) (documented)

Evidence