We have confirmed that a third party gained unauthorized access to the administrative system of “Avvy,” the live-streaming service operated by AnotherBall, and that certain customer information may have been exposed to an external party.

We sincerely apologize for the significant concern and inconvenience this incident has caused to our customers and all other parties concerned.

1. Overview

In the early hours of Friday, October 9, 2026, unauthorized external access was made to our administrative system.

Upon detecting the incident, we promptly blocked communications from the identified source of the unauthorized access and subsequently suspended all access to the administrative system. As of this announcement, we have completed the remediation of the issue that enabled the unauthorized access.

2. Timeline

  • Around 11:11 p.m., October 8: Suspicious external access to the administrative system began.
  • Around 2:30 a.m. – 6:42 a.m., October 9: Unauthorized access to customer information was confirmed.
  • 6:42 a.m.: Our monitoring systems detected the unauthorized access.
  • 6:49 a.m.: Communications from the identified source of the unauthorized access were blocked.
  • 7:11 a.m.: All access to the administrative system was suspended as a precautionary measure.
  • 7:13 a.m.: Measures were implemented to address the issue in the login process that enabled the unauthorized access.

3. Information That May Have Been Exposed

(1) Avvy Account Information

Affected customers: Certain customers whose account information was updated on or after March 31, 2026, including customers whose accounts have already been deleted (approximately 376,000 accounts).

Information involved:

  • Account creation date and time
  • Last active date and time
  • Date of birth
  • Country of residence selected when the account was created

(2) Information Related to Payout Requests

Affected customers: Customers who submitted payout requests between September 30 and October 8, 2026 (100 requests).

Information involved:

  • Requested payout amount, fees, and net payout amount
  • Email address registered with PayPal

With respect to PayPal, based on the information currently available to us, the information listed above is the only information that may have been exposed from our systems. PayPal passwords, other authentication credentials, bank account information, and similar information were not included.

Please note that we do not store customers’ credit card information, and no credit card information was exposed in this incident.

4. Cause

A third party gained unauthorized access to our administrative system through a method that was not intended or anticipated by the system. As a result, the third party was able to access certain administrative functions.

5. Next Steps

To prevent a recurrence, we will strengthen access controls and access monitoring for our administrative system. We will also report the incident to and cooperate with law enforcement authorities as necessary, and take appropriate action.

If our ongoing investigation identifies any additional information, we will promptly provide an update.

Customer Inquiries Regarding This Incident

Inquiry Form:
https://app.notion.com/p/anotherball/1baaeded16c680458866d243ebf43605

Once again, we sincerely apologize for the significant concern and inconvenience this incident has caused to our customers.