Information Leakage and Service Suspension Due to Unauthorized Access to “ARARA Message” Provided by Our Consolidated Subsidiary (Third Report)

Latest Status of the Incident and Impact

As a result of additional investigations into the security of ARARA Message, provided by consolidated subsidiary ARARA Co., Ltd., it was confirmed that only email addresses were taken from Environment B and transferred externally. The target comprises approximately 3,249,492 email addresses, and the total number of records taken after removing duplicates across categories is approximately 81,320,000. The service remains suspended and the restart date is undecided. The company reports that credit card information was not leaked. Reporting to public authorities is ongoing, and the direct impact on financial results is currently being examined.

Future Actions and Information Disclosure

The company will continue strengthening its information security framework in collaboration with external experts and will notify and appropriately respond to relevant parties. Contracted companies will be contacted individually, and end users are advised to be cautious of communications that may impersonate suspicious emails. As the impact on Fiscal Year 2027 is currently unknown, the company intends to make necessary disclosures promptly.