LifeCard confirms V-Preca data theft affecting 69 accounts and restores service
LifeCard confirms theft of V-Preca customer data at GMO Payment Gateway affecting 69 accounts, including three with full card credentials. LifeCard says those three accounts were closed on October 31, no misuse was found, and the suspended service has resumed.
- Disclosed
- Oct 31, 2026
- Updated Nov 2, 2026
- Severity
- Septic Tank Blew
- No CVE: a breach, not a bug
- Splash zone
- 69 V-Preca accounts at contractor GMO Payment Gateway; exposed fields differ by account
- LifeCard · V-Preca · third party
- In the wild
- Yes
- LifeCard confirms data theft; no misuse found on three fully exposed card accounts.
What happened
LifeCard initially disclosed possible customer-data exposure and a partial service suspension on October 31. Its November 2 follow-up confirms that data was stolen at its V-Preca contractor, GMO Payment Gateway, and lists 69 affected accounts, not a count of unique people:
- 63 accounts: names, email addresses, telephone numbers and partial addresses.
- 3 accounts: V-Preca numbers, V-Preca security codes, expiry dates and names.
- 3 accounts: partial V-Preca numbers.
LifeCard says the three accounts with full card credentials were closed on October 31 and that it had found no misuse of those three accounts or secondary harm from this incident. It will notify affected customers individually. The theft of information is now confirmed; theft of balances is not established.
The investigation follow-up still describes a partial suspension. A separate November 2 notice confirms that the suspended service has resumed after LifeCard completed the checks and measures it considered necessary; the maintenance FAQ now says there is no maintenance. The notices give no restoration time or technical root cause. Restoration does not undo the data exposure or establish that the investigation has concluded.
The original notice also promised accommodations for postpaid-charge repayments, with details to follow. Verify any account-specific repayment or recovery instructions through official support. Broader LifeCard or payment-network compromise is not established.
Crime-scene timeline
Oct 31, 2026
LifeCard discloses contractor access and possible customer-data exposure
Oct 31, 2026
LifeCard closes three accounts with fully exposed card credentials
The November 2 follow-up retrospectively confirms the closures; it reports no misuse of those three accounts.
Nov 2, 2026
Follow-up confirms theft affecting 69 accounts at GMO Payment Gateway
The table lists 63 accounts with contact details, three with full V-Preca credentials and names, and three with partial card numbers. LifeCard will notify affected customers individually.
Nov 2, 2026
Separate notice confirms the suspended service has resumed
LifeCard says required safety checks and measures are complete. This supersedes the partial-suspension status in the same-day investigation follow-up; neither notice gives a restoration time.
Who said what
We list each claim and who made it. Primary sources (the vendor, the researcher, the registry) are marked. Where reports disagree, we grade by the worst credible case.
- LifeCard October31 V-Preca security noticePrimaryConfirms contractor intrusion, possible data exposure, investigation and partial suspension; scope and counts are not established.
- V-Preca official maintenance FAQPrimaryThe undated FAQ now reports no system maintenance; its earlier registration/login outage notice is superseded by the dated November 2 resumption notice.
- LifeCard November2 V-Preca data-theft follow-upPrimaryNames GMO Payment Gateway, confirms theft affecting 69 accounts in three field categories, three October31 closures and no confirmed misuse or secondary harm; still describes partial suspension.
- LifeCard November2 V-Preca service-resumption noticePrimaryConfirms safety checks and necessary measures are complete and the suspended service has resumed; no restoration time is given.