Mobile Industry /
Kotodaman Community Platform Suspended After Security Incident Potentially Exposes Information From 750 Members
MIXI suspends Kotodaman's external Commune-powered community site following a data incident affecting 750 members, confirming passwords and payments were safe.
Key facts
- Topic:
- Mobile Industry
- Published:
- 2026-10-15
- Reported by:
- Gameforce Mobile News Desk
Key takeaways
- Incident affected third-party community provider Commune, not core Kotodaman servers.
- Potentially exposed email addresses and nicknames for approximately 750 members.
- Passwords, payment details, and core game credentials were completely unaffected.
Japanese gaming company MIXI has disclosed a security incident affecting the official community platform associated with its mobile word-based RPG Kotodaman. The announcement was reported on October 15 and concerns a third-party service used to operate the game's community website, rather than the core game itself. According to MIXI, the external platform Commune experienced unauthorised access between October 5 and October 6.
The incident may have allowed information associated with approximately 750 community members to be viewed or obtained. Email addresses were potentially involved for 749 of those members. Other information that may have been affected includes community identifiers, nicknames, profile descriptions, profile images, group memberships and certain account-related preferences.
MIXI emphasised that passwords, real names, residential addresses, telephone numbers and payment information were not included in the potentially exposed information. The company also stated that the main Kotodaman game accounts and payment systems operate separately from the affected community infrastructure. At the time of the announcement, no confirmed misuse of the information or secondary damage had been identified.
The community platform has been temporarily suspended while the service provider investigates and strengthens its security arrangements. Affected users are expected to receive individual notifications. The incident illustrates an important risk for modern mobile games. Publishers frequently rely on external platforms for community management, marketing and player engagement, creating additional systems that must be protected.
Even when the main game remains secure, a vulnerability affecting an associated service can expose information about its audience. For players, the immediate lesson is to remain cautious about unexpected messages claiming to represent the game's community administrators.
