Giftee suspends consumer features after a Prismatix intrusion
Giftee says an unauthorized party accessed Prismatix, its membership and login provider. Some consumer members’ email addresses and password information may have been exposed. Giftee suspended major consumer features while it investigates with the provider.
- Disclosed
- Nov 12, 2026
- Public disclosure date
- Severity
- Sharted
- No CVE: a breach, not a bug
- Splash zone
- Members of Giftee’s consumer service whose account data was held by Prismatix.
- SaaS · Data breach · Japan
- In the wild
- Yes
What happened
Giftee uses Prismatix to manage consumer member data and authenticate sign-ins. The attack path, password storage format and affected member count remain undisclosed. The November 13 update identifies email addresses and password information as possibly exposed. Giftee says it is working with Prismatix on investigation and recovery and will publish the reopening date once it verifies safety.
Crime-scene timeline
Nov 11, 2026
Giftee suspends major consumer features
The company pauses features to contain possible effects and check safety.
Nov 12, 2026
Giftee discloses unauthorized access at Prismatix
Giftee says it uses the provider for membership management and login authentication.
Nov 13, 2026
Giftee identifies potentially exposed account fields
The follow-up names email addresses and password information for some members. Investigation continues.
Who said what
We list each claim and who made it. Primary sources (the vendor, the researcher, the registry) are marked. Where reports disagree, we grade by the worst credible case.
- Giftee’s November 12 and 13 noticesPrimaryExplains the supplier dependency, feature suspension, possible account data exposure and password reuse advice.