Incident BriefingsSnow Peak store and member-app account intrusions

Snow Peak store and member-app account intrusions

Snow Peak detected suspicious access November 9 and confirmed unauthorized logins to its store/member app on October 29–30 and November 9. It believed the credentials came from outside its systems.

Last modified

Summary

  • Environment: Online store and membership application
  • Operational impact: Temporary service suspension during security response
  • Financial impact: No confirmed incident cost quantified
  • Record status: Developing record. Reviewed November 14, 2026; updated as evidence emerges.

What happened

Snow Peak detected suspicious access November 9 and confirmed unauthorized logins to its store/member app on October 29–30 and November 9. It believed the credentials came from outside its systems. [1]

Impact

Up to 445 accounts were accessed. Identity/contact details, purchase histories, points, payment method and delivery information may have been viewed. Card displays showed only partial numbers; Snow Peak said full card numbers and passwords had not leaked from its systems. [1]

Timeline

  1. First reported unauthorized logins

    First reported unauthorized logins.

    [1]

  2. Suspicious access detected

    Suspicious access detected.

    [1]

  3. Incident and response disclosed

    Incident and response disclosed.

    [1]

  4. Briefing updated

    This briefing was last reviewed and updated on November 14, 2026.

Threat Group & Attack Vector

Snow Peak believed the credentials used for unauthorized logins had been obtained outside its systems. [1]

Actors

  • No threat actor group has been identified in the reviewed public evidence.

TTPs

Response

Snow Peak temporarily suspended the affected services and strengthened security and monitoring. Its November 13 notice planned a store restart that day, with other services awaiting security measures. It had not confirmed secondary harm. [1]