{
  "id": "vpreca-contractor",
  "url": "https://ohshit.app/incidents/vpreca-contractor/",
  "title": "LifeCard confirms a V-Preca contractor intrusion and keeps some services paused",
  "level": 4,
  "level_name": "septic-tank-blew",
  "date": "2026-10-31",
  "date_is_approximate": false,
  "updated": null,
  "tags": [
    "LifeCard",
    "V-Preca",
    "third party"
  ],
  "ecosystems": [],
  "summary": "LifeCard confirms unauthorized access at a contractor used for V-Preca. Customer information may have leaked; affected fields and counts remain unknown. Some service functions remain paused while the companies investigate.",
  "splash": "V-Preca customers; the compromised contractor and affected customer set are not named",
  "wipe": "Follow official V-Preca notices, check service availability and verify unexpected support or payment requests",
  "in_the_wild": "yes",
  "source_exception": null,
  "cves": [],
  "fixed": [],
  "checklist": [
    {
      "title": "Verify service availability through official support",
      "hint": "The maintenance FAQ lists registration and app/web login as unavailable, with no reopening date. It says shopping is unaffected unless a security lock was already set before maintenance; do not assume that an unavailable login means a card cannot be used."
    },
    {
      "title": "Use the official notice for repayment and support updates",
      "hint": "LifeCard says it is arranging accommodations for postpaid-charge repayments and will announce details. Do not pay an unsolicited account or disclose credentials in response to a supposed restoration message; confirm through your established V-Preca support route."
    }
  ],
  "sources": [
    {
      "name": "LifeCard October31 V-Preca security notice",
      "url": "https://vpc.lifecard.co.jp/news/2026/detail/important-notice2.html",
      "says": "Confirms contractor intrusion, possible data exposure, investigation and partial suspension; scope and counts are not established.",
      "primary": true
    },
    {
      "name": "V-Preca official maintenance FAQ",
      "url": "https://support.vpc.lifecard.co.jp/%E3%82%B7%E3%82%B9%E3%83%86%E3%83%A0%E3%83%A1%E3%83%B3%E3%83%86%E3%83%8A%E3%83%B3%E3%82%B9%E3%81%AB%E3%81%A4%E3%81%84%E3%81%A6-663973daed6bb900247d3a1e",
      "says": "Read in full through the public web reader; describes unavailable registration/login, shopping exception and no fixed restoration date. This FAQ is undated.",
      "primary": true
    }
  ],
  "headline": null,
  "one_liner": null,
  "in_the_wild_note": "LifeCard confirms contractor intrusion; data exfiltration remains unconfirmed.",
  "mitigation": null,
  "timeline": [
    {
      "date": "Oct 31, 2026",
      "title": "LifeCard discloses contractor access and possible customer-data exposure"
    }
  ],
  "body_markdown": "The announcement concerns V-Preca’s service contractor. It does not identify the entry point or confirm stolen balances. Broader LifeCard or payment-network compromise is not established."
}