Canonical URL: https://giftcard.news/fraud-security/valuedesign-value-card-data-leak-mos-card-2026/

---
description: Paycloud discloses 1,424,748 leaked prepaid records. MOS reports separate card exposure, PIN changes and limited service effects in October 23 notices.
title: Valuedesign Value Card data leak prompts MOS PIN resets
image: https://giftcard.news/images/social/v1/valuedesign-reports-card-data-leak-mos-resets-pins-86f48c3d79a3f752a59380872801a36a.jpg
---

1. [Home](https://giftcard.news/)
2. [Fraud & Security](https://giftcard.news/fraud-security/)

# Valuedesign reports card-data leak as MOS resets PINs

Paycloud reports 1,424,748 leaked Value Card records. MOS separately discloses its card exposure and PIN resets, with key payment routes continuing.

By [Daniel Brooks](https://giftcard.news/author/daniel-brooks/) October 23, 2026 4 min read [ Google News ](https://google.com/preferences/source?q=giftcard.news&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news) 

Share [ ](https://x.com/intent/post?url=https%3A%2F%2Fgiftcard.news%2Ffraud-security%2Fvaluedesign-value-card-data-leak-mos-card-2026%2F%3Futm%5Fsource%3Dx%26utm%5Fmedium%3Dsocial&text=Valuedesign+reports+card-data+leak+as+MOS+resets+PINs&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news "X") [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fgiftcard.news%2Ffraud-security%2Fvaluedesign-value-card-data-leak-mos-card-2026%2F%3Futm%5Fsource%3Dlinkedin%26utm%5Fmedium%3Dsocial&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news "LinkedIn") [ ](https://wa.me/?text=Valuedesign+reports+card-data+leak+as+MOS+resets+PINs+https%3A%2F%2Fgiftcard.news%2Ffraud-security%2Fvaluedesign-value-card-data-leak-mos-card-2026%2F%3Futm%5Fsource%3Dwhatsapp%26utm%5Fmedium%3Dsocial&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news "WhatsApp") 

![Valuedesign corporate wordmark in green on a white background.](https://giftcard.news/images/variants/v1/valuedesign-reports-card-data-leak-mos-resets-pins-corporate-wordmark-green-white-w1200.webp) 

 Valuedesign corporate wordmark, used to identify the service provider. This is a company identification image, rather than a photograph of the incident. Photo: Valuedesign 

An attack on [Valuedesign](https://giftcard.news/company/valuedesign/)’s Value Card prepaid system exposed 1,424,748 records containing ID numbers, PINs and balances, according to an October 23 disclosure by parent [Paycloud Holdings](https://giftcard.news/company/paycloud-holdings/). [MOS Food Services](https://giftcard.news/company/mos-food-services/) separately reported exposed MOS Card information and forced PIN changes, showing how a provider-level breach can reach a retailer’s own stored-value program. [\[S1\]](#article-source-1)[\[S2\]](#article-source-2)[\[S3\]](#article-source-3)

The disclosures describe card credentials and balance information. The provider’s total is a record count that includes IDs not yet purchased by end users, rather than a count of affected customers or a sum of money stolen. [\[S2\]](#article-source-2)

## The provider’s count includes IDs awaiting purchase

The data behind the story 

### Value Card records disclosed as leaked

Paycloud’s exact breakdown of the 1,424,748-record total.

 Disclosed records 

ID records

Tap or hover for details. All values are also available in the data table.

Source 

Paycloud Holdings October 23 disclosure

Japan, Value Card system; position disclosed October 23, 2026, with confirmation dated October 19\. Unissued IDs are defined as IDs before an end user purchases them. These are records containing ID, PIN and balance information, not unique users, active cards, transactions or money lost. The provider’s categories are not equated with MOS’s circulation categories.

Show data tableHide data table 

Scroll left or right to see all columns 

__Value Card records disclosed as leaked (ID records)__
| Category     | Disclosed records  |
| ------------ | ------------------ |
| Issued IDs   | 569,224 ID records |
| Unissued IDs | 855,524 ID records |

Paycloud listed 569,224 issued IDs and 855,524 unissued IDs. It said it confirmed the incident on October 19, blocked the unauthorized access route and took measures against further damage. Issued IDs had presented a misuse risk, the company said, but countermeasures had been applied and it reported no actual harm from unauthorized use at the time of the notice. [\[S2\]](#article-source-2)

The company attributed the attack to exploitation of a web-server vulnerability in part of its subsidiary’s environment. It did not identify the vulnerability in the disclosure. Paycloud said relevant authorities had been notified and that outside specialists would help recheck vulnerabilities across services. Its financial impact remained under review. [\[S2\]](#article-source-2)

Valuedesign provides merchant-specific prepaid money infrastructure, purchase-data analysis and smartphone applications. It is wholly owned by Paycloud Holdings. That operating model puts a shared technology provider behind programs presented to customers under individual merchants’ brands. The incident therefore involves both the provider’s response and each issuer’s handling

Your free reader account 

## Continue reading for free.

Create your account or sign in to get unlimited access.

Continue with LinkedIn 

Continue with Google 

Continue with Facebook 

No payment required. Newsletter signup is optional.

[Already registered? Sign in](https://giftcard.news/login/?returnTo=%2Ffraud-security%2Fvaluedesign-value-card-data-leak-mos-card-2026%2F) 

## In this article

### Companies

* [MOS Food Services](https://giftcard.news/company/mos-food-services/)
* [Paycloud Holdings](https://giftcard.news/company/paycloud-holdings/)
* [Valuedesign](https://giftcard.news/company/valuedesign/)

### Sources and documents

* [\[S1\] Original operator breach notice](https://www.valuedesign.jp/news/info/20261023?utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news) — Valuedesign
* [\[S2\] Paycloud full two-page incident disclosure and record breakdown](https://contents.xj-storage.jp/xcontents/AS71226/a90ef759/c4e7/403b/8096/5a78ba81a912/140120261023555340.pdf?utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news) — Paycloud Holdings
* [\[S3\] MOS full three-page issuer disclosure, record scope and PIN response](https://ssl4.eir-parts.net/doc/8153/tdnet/2898082/00.pdf?utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news) — MOS Food Services
* [\[S4\] Operator services and merchant-specific prepaid infrastructure](https://www.valuedesign.jp/?utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news) — Valuedesign
* [\[S5\] Company profile and parent ownership](https://www.valuedesign.jp/company/profile/?utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news) — Valuedesign
* [\[S6\] Independent reporting of MOS issuer announcement](https://www.asahi.com/articles/ASVBR2S2NVBRULFA02CM.html?utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news) — Asahi Shimbun
* [\[S7\] Independent reporting of MOS incident and PIN changes](https://newsdig.tbs.co.jp/articles/-/3035086?display=1&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news) — TBS NEWS DIG
* [\[S8\] Original MOS Card product description and gifting use](https://www.mos.jp/service/mosca/what/?utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news) — MOS Food Services

Share [ ](https://x.com/intent/post?url=https%3A%2F%2Fgiftcard.news%2Ffraud-security%2Fvaluedesign-value-card-data-leak-mos-card-2026%2F%3Futm%5Fsource%3Dx%26utm%5Fmedium%3Dsocial&text=Valuedesign+reports+card-data+leak+as+MOS+resets+PINs&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news "X") [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fgiftcard.news%2Ffraud-security%2Fvaluedesign-value-card-data-leak-mos-card-2026%2F%3Futm%5Fsource%3Dlinkedin%26utm%5Fmedium%3Dsocial&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news "LinkedIn") [ ](https://wa.me/?text=Valuedesign+reports+card-data+leak+as+MOS+resets+PINs+https%3A%2F%2Fgiftcard.news%2Ffraud-security%2Fvaluedesign-value-card-data-leak-mos-card-2026%2F%3Futm%5Fsource%3Dwhatsapp%26utm%5Fmedium%3Dsocial&utm%5Fsource=giftcard.news&utm%5Fcampaign=giftcard.news "WhatsApp") 

![Portrait of Daniel Brooks](https://giftcard.news/images/variants/v1/daniel-brooks-editorial-portrait-w320.webp) 

About the author

## [Daniel Brooks](https://giftcard.news/author/daniel-brooks/)

Journalist — Payments, Security & PCI DSS

Daniel Brooks covers payment networks, financial technology, payment security, gift card fraud and PCI DSS for Gift Card News.

From reading to building

## Your next move in gift cards.

Tell us what you’re building. We’ll help you explore suitable providers.

[Find a provider ](https://giftcard.news/find-a-provider/) 

## Related articles

[Fraud & Security](https://giftcard.news/fraud-security/) News 

### [giftee Group estimates JPY 550 million loss after unauthorized e-gift issuance](https://giftcard.news/fraud-security/giftee-unauthorized-egift-issuance-estimated-loss-2026/)

[Daniel Brooks](https://giftcard.news/author/daniel-brooks/) October 26, 2026 3 min 

[Fraud & Security](https://giftcard.news/fraud-security/) News 

### [San Francisco settlement creates $1.525 million Vanilla gift-card fund](https://giftcard.news/fraud-security/san-francisco-vanilla-gift-card-restitution-fund/)

[Daniel Brooks](https://giftcard.news/author/daniel-brooks/) October 23, 2026 4 min 

[Fraud & Security](https://giftcard.news/fraud-security/) News 

### [NSW Police warn of gift-card impersonation scams across Sydney](https://giftcard.news/fraud-security/nsw-police-gift-card-impersonation-scams-sydney/)

[Daniel Brooks](https://giftcard.news/author/daniel-brooks/) October 14, 2026 4 min

```json
{"@context":"https://schema.org","@graph":[{"@type":"NewsMediaOrganization","@id":"https://giftcard.news/#publisher","name":"Gift Card News","url":"https://giftcard.news/","description":"News and analysis covering gift cards, retail, loyalty, rewards and payments worldwide.","logo":{"@type":"ImageObject","url":"https://giftcard.news/icon-512.png","contentUrl":"https://giftcard.news/icon-512.png","width":512,"height":512,"@id":"https://giftcard.news/#logo"},"publishingPrinciples":"https://giftcard.news/editorial-policy/","correctionsPolicy":"https://giftcard.news/editorial-policy/"},{"@type":"WebSite","@id":"https://giftcard.news/#website","url":"https://giftcard.news/","name":"Gift Card News","description":"News and analysis covering gift cards, retail, loyalty, rewards and payments worldwide.","inLanguage":"en","publisher":{"@id":"https://giftcard.news/#publisher"},"potentialAction":{"@type":"SearchAction","target":"https://giftcard.news/search/?q={search_term_string}","query-input":"required name=search_term_string"}},{"@type":"Person","@id":"https://giftcard.news/author/daniel-brooks/#person","name":"Daniel Brooks","url":"https://giftcard.news/author/daniel-brooks/","description":"Daniel Brooks covers payment networks, financial technology, payment security, gift card fraud and PCI DSS for Gift Card News.","jobTitle":"Journalist — Payments, Security & PCI DSS","image":{"@type":"ImageObject","url":"https://giftcard.news/images/daniel-brooks-editorial-portrait.webp","contentUrl":"https://giftcard.news/images/daniel-brooks-editorial-portrait.webp","width":1254,"height":1254,"caption":"Illustrated portrait representing the Daniel Brooks editorial profile.","@id":"https://giftcard.news/images/daniel-brooks-editorial-portrait.webp#image","encodingFormat":"image/webp","description":"Illustrated portrait for Daniel Brooks, a Gift Card News editorial pen name","creditText":"Gift Card News / AI-generated illustration"}},{"@type":"ImageObject","url":"https://giftcard.news/images/valuedesign-reports-card-data-leak-mos-resets-pins-corporate-wordmark-green-white.webp","contentUrl":"https://giftcard.news/images/valuedesign-reports-card-data-leak-mos-resets-pins-corporate-wordmark-green-white.webp","width":1200,"height":630,"caption":"Valuedesign corporate wordmark, used to identify the service provider. This is a company identification image, rather than a photograph of the incident.","@id":"https://giftcard.news/images/valuedesign-reports-card-data-leak-mos-resets-pins-corporate-wordmark-green-white.webp#image","encodingFormat":"image/webp","description":"Valuedesign corporate wordmark in green on a white background.","creditText":"Valuedesign","isBasedOn":"https://www.valuedesign.jp/news/info/20261023"},{"@type":"Dataset","@id":"https://giftcard.news/fraud-security/valuedesign-value-card-data-leak-mos-card-2026/#dataset","url":"https://giftcard.news/fraud-security/valuedesign-value-card-data-leak-mos-card-2026/","name":"Valuedesign reports card-data leak as MOS resets PINs: figure data","description":"Tabular data for the figures accompanying \"Valuedesign reports card-data leak as MOS resets PINs\". Sources, units and limitations are documented with each figure.","inLanguage":"en","isPartOf":{"@id":"https://giftcard.news/fraud-security/valuedesign-value-card-data-leak-mos-card-2026/#article"},"isAccessibleForFree":false,"hasPart":[{"@id":"https://giftcard.news/fraud-security/valuedesign-value-card-data-leak-mos-card-2026/#article-figure-1-dataset"},{"@id":"https://giftcard.news/fraud-security/valuedesign-value-card-data-leak-mos-card-2026/#article-figure-2-dataset"}],"distribution":{"@type":"DataDownload","contentUrl":"https://giftcard.news/download.csv?article=%2Ffraud-security%2Fvaluedesign-value-card-data-leak-mos-card-2026%2F","encodingFormat":"text/csv","isAccessibleForFree":false}},{"@type":"Dataset","@id":"https://giftcard.news/fraud-security/valuedesign-value-card-data-leak-mos-card-2026/#article-figure-1-dataset","url":"https://giftcard.news/fraud-security/valuedesign-value-card-data-leak-mos-card-2026/#article-figure-1","name":"Value Card records disclosed as leaked","description":"Tabular values displayed in the figure \"Value Card records disclosed as leaked\" and its accompanying data table.\n\nPaycloud’s exact breakdown of the 1,424,748-record total.\n\nJapan, Value Card system; position disclosed October 23, 2026, with confirmation dated October 19. Unissued IDs are defined as IDs before an end user purchases them. These are records containing ID, PIN and balance information, not unique users, active cards, transactions or money lost. The provider’s categories are not equated with MOS’s circulation categories.","inLanguage":"en","isPartOf":{"@id":"https://giftcard.news/fraud-security/valuedesign-value-card-data-leak-mos-card-2026/#dataset"},"isAccessibleForFree":true,"variableMeasured":[{"@type":"PropertyValue","name":"Disclosed records","unitText":"ID records"}],"isBasedOn":[{"@type":"CreativeWork","name":"Paycloud Holdings October 23 disclosure","url":"https://contents.xj-storage.jp/xcontents/AS71226/a90ef759/c4e7/403b/8096/5a78ba81a912/140120261023555340.pdf"}]},{"@type":"Dataset","@id":"https://giftcard.news/fraud-security/valuedesign-value-card-data-leak-mos-card-2026/#article-figure-2-dataset","url":"https://giftcard.news/fraud-security/valuedesign-value-card-data-leak-mos-card-2026/#article-figure-2","name":"MOS’s approximate circulation breakdown","description":"Tabular values displayed in the figure \"MOS’s approximate circulation breakdown\" and its accompanying data table.\n\nThe issuer’s rounded description of its own leaked card records.\n\nJapan, MOS Card program; issuer disclosure October 23, 2026. MOS reports an exact total of 1,133,070 leaked records, with approximately 570,000 circulated and 560,000 uncirculated cards. Rounded components do not reproduce that exact total. These are not unique customers, losses or additional records to add to Paycloud’s separate provider count. No direct equivalence with provider issued/unissued IDs is assumed.","inLanguage":"en","isPartOf":{"@id":"https://giftcard.news/fraud-security/valuedesign-value-card-data-leak-mos-card-2026/#dataset"},"isAccessibleForFree":false,"variableMeasured":[{"@type":"PropertyValue","name":"Disclosed records","unitText":"card records, approximate"}],"isBasedOn":[{"@type":"CreativeWork","name":"MOS Food Services October 23 disclosure","url":"https://ssl4.eir-parts.net/doc/8153/tdnet/2898082/00.pdf"}]},{"@type":"NewsArticle","@id":"https://giftcard.news/fraud-security/valuedesign-value-card-data-leak-mos-card-2026/#article","url":"https://giftcard.news/fraud-security/valuedesign-value-card-data-leak-mos-card-2026/","headline":"Valuedesign reports card-data leak as MOS resets PINs","description":"Paycloud discloses 1,424,748 leaked prepaid records. MOS reports separate card exposure, PIN changes and limited service effects in October 23 notices.","datePublished":"2026-10-23T00:00:00.000Z","dateModified":"2026-10-25T08:00:43.245Z","inLanguage":"en","mainEntityOfPage":{"@id":"https://giftcard.news/fraud-security/valuedesign-value-card-data-leak-mos-card-2026/#webpage"},"isPartOf":{"@id":"https://giftcard.news/#website"},"isAccessibleForFree":false,"hasPart":[{"@type":"WebPageElement","isAccessibleForFree":false,"cssSelector":".reader-restricted"},{"@id":"https://giftcard.news/fraud-security/valuedesign-value-card-data-leak-mos-card-2026/#dataset"}],"image":[{"@type":"ImageObject","url":"https://giftcard.news/images/valuedesign-reports-card-data-leak-mos-resets-pins-corporate-wordmark-green-white.webp","contentUrl":"https://giftcard.news/images/valuedesign-reports-card-data-leak-mos-resets-pins-corporate-wordmark-green-white.webp","width":1200,"height":630,"caption":"Valuedesign corporate wordmark, used to identify the service provider. This is a company identification image, rather than a photograph of the incident.","@id":"https://giftcard.news/images/valuedesign-reports-card-data-leak-mos-resets-pins-corporate-wordmark-green-white.webp#image","encodingFormat":"image/webp","description":"Valuedesign corporate wordmark in green on a white background.","creditText":"Valuedesign","isBasedOn":"https://www.valuedesign.jp/news/info/20261023"}],"articleSection":"Fraud & Security","keywords":["MOS Food Services","Paycloud Holdings","Valuedesign"],"mentions":[{"@type":"Organization","@id":"https://giftcard.news/company/mos-food-services/#entity","name":"MOS Food Services","url":"https://giftcard.news/company/mos-food-services/"},{"@type":"Organization","@id":"https://giftcard.news/company/paycloud-holdings/#entity","name":"Paycloud Holdings","url":"https://giftcard.news/company/paycloud-holdings/"},{"@type":"Organization","@id":"https://giftcard.news/company/valuedesign/#entity","name":"Valuedesign","url":"https://giftcard.news/company/valuedesign/"}],"wordCount":681,"citation":[{"@type":"CreativeWork","name":"[S1] Original operator breach notice","url":"https://www.valuedesign.jp/news/info/20261023","publisher":{"@type":"Organization","name":"Valuedesign"}},{"@type":"CreativeWork","name":"[S2] Paycloud full two-page incident disclosure and record breakdown","url":"https://contents.xj-storage.jp/xcontents/AS71226/a90ef759/c4e7/403b/8096/5a78ba81a912/140120261023555340.pdf","publisher":{"@type":"Organization","name":"Paycloud Holdings"}},{"@type":"CreativeWork","name":"[S3] MOS full three-page issuer disclosure, record scope and PIN response","url":"https://ssl4.eir-parts.net/doc/8153/tdnet/2898082/00.pdf","publisher":{"@type":"Organization","name":"MOS Food Services"}},{"@type":"CreativeWork","name":"[S4] Operator services and merchant-specific prepaid infrastructure","url":"https://www.valuedesign.jp/","publisher":{"@type":"Organization","name":"Valuedesign"}},{"@type":"CreativeWork","name":"[S5] Company profile and parent ownership","url":"https://www.valuedesign.jp/company/profile/","publisher":{"@type":"Organization","name":"Valuedesign"}},{"@type":"CreativeWork","name":"[S6] Independent reporting of MOS issuer announcement","url":"https://www.asahi.com/articles/ASVBR2S2NVBRULFA02CM.html","publisher":{"@type":"Organization","name":"Asahi Shimbun"}},{"@type":"CreativeWork","name":"[S7] Independent reporting of MOS incident and PIN changes","url":"https://newsdig.tbs.co.jp/articles/-/3035086?display=1","publisher":{"@type":"Organization","name":"TBS NEWS DIG"}},{"@type":"CreativeWork","name":"[S8] Original MOS Card product description and gifting use","url":"https://www.mos.jp/service/mosca/what/","publisher":{"@type":"Organization","name":"MOS Food Services"}}],"author":[{"@id":"https://giftcard.news/author/daniel-brooks/#person"}],"publisher":{"@id":"https://giftcard.news/#publisher"}},{"@type":"WebPage","@id":"https://giftcard.news/fraud-security/valuedesign-value-card-data-leak-mos-card-2026/#webpage","url":"https://giftcard.news/fraud-security/valuedesign-value-card-data-leak-mos-card-2026/","name":"Valuedesign reports card-data leak as MOS resets PINs","description":"Paycloud discloses 1,424,748 leaked prepaid records. MOS reports separate card exposure, PIN changes and limited service effects in October 23 notices.","datePublished":"2026-10-23T00:00:00.000Z","dateModified":"2026-10-25T08:00:43.245Z","inLanguage":"en","isPartOf":{"@id":"https://giftcard.news/#website"},"mainEntity":{"@id":"https://giftcard.news/fraud-security/valuedesign-value-card-data-leak-mos-card-2026/#article"},"breadcrumb":{"@id":"https://giftcard.news/fraud-security/valuedesign-value-card-data-leak-mos-card-2026/#breadcrumbs"},"primaryImageOfPage":{"@id":"https://giftcard.news/images/valuedesign-reports-card-data-leak-mos-resets-pins-corporate-wordmark-green-white.webp#image"}},{"@type":"BreadcrumbList","@id":"https://giftcard.news/fraud-security/valuedesign-value-card-data-leak-mos-card-2026/#breadcrumbs","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://giftcard.news/"},{"@type":"ListItem","position":2,"name":"Fraud & Security","item":"https://giftcard.news/fraud-security/"},{"@type":"ListItem","position":3,"name":"Valuedesign reports card-data leak as MOS resets PINs","item":"https://giftcard.news/fraud-security/valuedesign-value-card-data-leak-mos-card-2026/"}]}]}
```