---
title: "Snow Peak reuse-service intrusion"
description: "Snow Peak confirmed on November 12 that unauthorized access on November 9 may have exposed data from its reuse purchasing service. It attributed access to a service vulnerability."
incident_type: "Cybersecurity incident"
status: "active"
last_modified: "2026-11-14"
canonical_url: "https://www.ally.security/incidents/snow-peak-reuse-service-intrusion-2026"
markdown_url: "https://www.ally.security/incidents/snow-peak-reuse-service-intrusion-2026.md"
stix_url: "https://www.ally.security/incidents/snow-peak-reuse-service-intrusion-2026/stix.json"
---

# Snow Peak reuse-service intrusion

Snow Peak confirmed on November 12 that unauthorized access on November 9 may have exposed data from its reuse purchasing service. It attributed access to a service vulnerability.

Last modified Nov 14, 2026 · 1 source

## Summary

- **Environment:** Reuse purchasing service
- **Operational impact:** Temporary service suspension during security response
- **Financial impact:** No confirmed incident cost quantified

## What happened

[Snow Peak](https://www.snowpeak.co.jp/) confirmed on November 12 that unauthorized access on November 9 may have exposed data from its reuse purchasing service. It attributed access to a service vulnerability. [1](#source-1)

## Impact

The preliminary scope was 24,948 people. Potential fields included identity/contact and demographic information, customer/order records, identity-verification status and bank-transfer account details. Passwords, card numbers, bank PINs and online-banking credentials were excluded. [1](#source-1)

## Timeline

### November 9, 2026 — Reuse-service intrusion

Reuse-service intrusion. [1](#source-1)

### November 12, 2026 — Potential exposure confirmed

Potential exposure confirmed. [1](#source-1)

### November 13, 2026 — Incident and response disclosed

Incident and response disclosed. [1](#source-1)

### November 14, 2026 — Briefing updated

This briefing was last reviewed and updated on November 14, 2026.

## Threat Group & Attack Vector

Snow Peak attributed this intrusion to a vulnerability but did not identify a CVE or specific exploit. [1](#source-1)

### Actors

- No threat actor group has been identified in the reviewed public evidence.

### TTPs

- No specific ATT\&CK technique is mapped from the available evidence.

## Response

Snow Peak temporarily suspended the affected services and strengthened security and monitoring. Its [November 13 notice](https://www.snowpeak.co.jp/news/p20261113-0/) planned a store restart that day, with other services awaiting security measures. It had not confirmed secondary harm. [1](#source-1)

## Assets

[Download the case-scoped STIX 2.1 bundle](<https://www.ally.security/incidents/snow-peak-reuse-service-intrusion-2026/stix.json>)

## Sources

Primary source records used to research this incident.

<a id="source-1"></a>

### Snow Peak notice of four online-service incidents

official · Snow Peak Inc. · Nov 13, 2026

<https://www.snowpeak.co.jp/news/p20261113-0/>

<details>
<summary>Evidence ledger</summary>

Review the supporting structured claims.

1. **Resulted In · 100% confidence · current**  
   Snow Peak reuse-service intrusion: Reuse-service intrusion
2. **Resulted In · 100% confidence · current**  
   Snow Peak reuse-service intrusion: Snow Peak confirmed on November 12 that unauthorized access on November 9 may have exposed data from its reuse purchasing service. It attributed access to a service vulnerability.
3. **Resulted In · 100% confidence · current**  
   Snow Peak reuse-service intrusion: Potential exposure confirmed
4. **Affected Organization · 100% confidence · current**  
   Snow Peak reuse-service intrusion: Snow Peak Inc.
5. **Resulted In · 100% confidence · current**  
   Snow Peak reuse-service intrusion: The preliminary scope was 24,948 people. Potential fields included identity/contact and demographic information, customer/order records, identity-verification status and bank-transfer account details. Passwords, card numbers, bank PINs and online-banking credentials were excluded.
6. **Occurred At · 100% confidence · current**  
   Potential exposure confirmed: 2026-11-12
7. **Occurred At · 100% confidence · current**  
   Reuse-service intrusion: 2026-11-09
8. **Occurred At · 100% confidence · current**  
   Incident and response disclosed: 2026-11-13
9. **Resulted In · 100% confidence · current**  
   Snow Peak reuse-service intrusion: Incident and response disclosed
10. **Disclosed At · 100% confidence · current**  
   Snow Peak reuse-service intrusion: 2026-11-13
11. **Resulted In · 100% confidence · current**  
   Snow Peak reuse-service intrusion: Snow Peak temporarily stopped the affected services, strengthened security and monitoring, and was reporting to relevant authorities. On November 13 it announced a store restart planned that day; the other services awaited security measures. It had not confirmed secondary harm.

</details>