Comic Cmoa: Manga platform partially back online after data leak

The Japanese digital manga shop Comic Cmoa restored parts of its service on October 29, 2026. After unauthorized access to its systems, operator NTT Solmare had fully halted the service on October 15. The resumption initially applies only to certain functions; new manga still cannot be purchased.

Purchased manga can be read in the browser again

According to the official statement from NTT Solmare, users can once again open manga they have already bought through a web browser and use the manga flat-rate offering. Changes to account details and cancellation requests for existing monthly and flat-rate subscriptions are also possible. Before using these functions, a password reset is required.

Access via the bookshelf app, the purchase of manga and point balances, automatic purchases of new releases, new registrations and account deletion have not yet been restored. The app is expected to follow soon; the company intends to gradually re-enable purchases depending on the payment method. As MANGA Watch reports, access from abroad and via VPN is also currently restricted for security reasons.

Up to 4.2 million log entries affected

The incident goes beyond a mere technical disruption. In the fourth situation report of October 21, NTT Solmare confirmed the leak of 319 records from the member database, including email addresses and hashed passwords. In addition, up to 4.2 million entries with possible details such as email addresses, nicknames, birth dates and gender were taken from system logs.

The number of log entries does not necessarily correspond to the number of people affected: multiple entries are possible. According to the company, passwords were not contained in these logs. Credit card data was not stored in the attacked system; no data loss was found for purchase histories and personal bookshelves.

NTT Solmare advises affected users to change passwords that are identical on other services and to ignore suspicious messages. For periods in which paid offerings were unavailable, automatic charges are in principle not to be made; the operator intends to handle exceptions individually.

The incident thus directly affects access to digitally purchased manga. Other offerings also distribute manga via their own web platforms, for example the series launch on KimiComi. Security incidents at companies in Japan's pop culture industry have also been a topic before, such as at Good Smile Company. A date for the full reinstatement of Comic Cmoa is still pending.