Q1. What is happening?
A. In response to a vulnerability in PHP (a programming language used to build websites), reported on October 21, 2026 and widely covered in the news, some financial institutions have temporarily suspended their web services. As a precautionary measure that puts safety first, Moneytree has also been suspending data retrieval from the affected financial institutions in stages since approximately 21:45 JST on October 21, 2026.
Q2. Which financial institutions are affected?
A. The affected financial institutions are as follows:
・MUFG Card (including Mitsubishi UFJ Card)
・NICOS Card
・Mitsubishi UFJ-VISA (standalone credit card type)
・DC Card (individual, corporate)
・DC Card co-branded cards issued with regional banks:
JOYO CARD plus (Joyo Bank), GOODY Card (Ashikaga Bank), Chibagin Super Card (Chiba Bank), Shizugin joyca (Shizuoka Bank), Kyoto Card Neo (Bank of Kyoto), I be One (Bank of Iwate), Yamagin YM Card (Yamaguchi Bank), clover (Hokuyo Bank), Hirogin Value One (Hiroshima Bank), HaLuCa (Hachijuni Nagano Bank), STIO (Shiga Bank), 105 BESTIO (Hyakugo Bank), IYOCA (Iyo Bank), 114 SalutCa (Hyakujushi Bank)
・JA Card
・J-WEST Card (excluding JCB)
・OP Credit (VISA/MC)
・Nissenren Card
Q3. Are Moneytree’s systems affected?
A. Moneytree’s systems are not directly affected by this vulnerability.
The suspension for the financial institutions listed in Q2 is a measure taken in line with the service suspensions on the financial institutions’ side.
Q4. When will data retrieval resume?
A. Data retrieval will resume once the financial institutions have restored their services and safety has been confirmed. At this time, we do not know when this will be. We will announce the resumption on this page.
Q5. What happens to transactions made during the suspension?
A. Once data retrieval resumes, transactions from the suspension period are expected to be reflected over time, to the extent that the financial institutions provide them.
Q6. Do end users need to take any action?
A. No action is required at this time. During the suspension, the affected financial institutions will show as “Under maintenance,” and their data will not be updated.
In principle, end users will not need to re-register their accounts after data retrieval resumes. However, if an end user changes their password on the financial institution’s side during the suspension, they will need to re-enter the new password in Moneytree after data retrieval resumes.
Q7. Could other financial institutions also be suspended?
A. As a result of this issue, data retrieval from other financial institutions may also become unavailable.
If Moneytree suspends data retrieval as a precaution to ensure safety, we will list the affected financial institutions on this page.
However, if a financial institution suspends its web services on its own, Moneytree may not be able to identify every case immediately. If an account’s data has stopped updating, please also check the announcements from the financial institution concerned.