Another Language:
日本語
On October 19, 2026, we identified suspicious WordPress plugins on the websites “Greenkeys” and “GreenEchoes Studio,” which appear to have been installed by a third party.
The plugins caused the websites to stop displaying properly.
We apologize for the concern and inconvenience this has caused our users and everyone involved.
What Happened
The affected websites are:
- Greenkeys (https://green-keys.info/）
- GreenEchoes Studio (https://company.greenechoes-studio.com/）
Our investigation confirmed that plugins had been installed on both websites without the administrators’ knowledge. We also confirmed that records of plugin operations via a remote management feature match the installation time of the files in question.
However, we are continuing to investigate how the unauthorized activity was carried out.
[October 19, 2026 Update]
We subsequently became aware of a reported security incident related to the external WordPress remote management service UpdraftCentral.
The nature and timing of the plugin operations recorded on our websites have similarities to the reported incident, and a connection is suspected.
However, we are continuing to investigate the specific method by which the unauthorized activity on our websites was carried out.
Actions Taken
After identifying the incident, we took the following actions:
- Disabled and removed the suspicious plugins
- Disconnected the websites from the external remote management service
- Changed and strengthened protection of credentials for WordPress and related services
- Reviewed administrator accounts and access permissions
- Checked the integrity of WordPress core files and files for key plugins
- Investigated suspicious PHP files and scheduled tasks
Our preliminary investigation to date has found no clear evidence of new malicious programs beyond the unauthorized plugins that have been removed.
[Current Service Status]
We have removed the suspicious plugins and restored the websites. They are now displaying normally.
We are continuing to check for any recurrence and for related security issues.
Impact on Personal Information
Personal information collected through inquiries and other channels on Greenkeys and GreenEchoes Studio is managed using external services and is not stored on the servers hosting either website.
Accordingly, large amounts of inquiry information and similar data were not stored on the website servers at the time of this incident.
We are continuing to assess whether WordPress administrator account information or integration settings for external services were affected.
Next Steps
We will strengthen our security management by reviewing access permissions for integrations with external services, protecting administrator accounts, vetting installed plugins, and monitoring files for tampering.
We will continue working to ensure that our websites remain safe to use.
GreenEchoes Studio
