October 23, 2026 Notice Regarding Customer Information Leakage

Overview of the Incident and Current Status

On October 20, 2026, unauthorized access to the case management system was confirmed. External access was suspended at 10:30 on the same day, and the application form reception was suspended at 11:05. Affected data include customer information, information on business partners and employees, and device information; payment information such as credit card numbers is not included. The scale of the incident is disclosed to the extent currently known, and cause investigation and recurrence prevention measures are underway. The group is strengthening security across the organization and proceeding with reports to relevant agencies and establishment of contact points. The impact on business results is being examined, and if a material impact is confirmed, it will be disclosed promptly.

Future Response and Impact

The restart is scheduled after completing system and application form security measures by around October 28, 2026. The group has strengthened two-factor authentication, account and access rights management, and monitoring systems, and is reviewing vulnerability management, diagnostics, and defenses for public systems. Reports and consultations with the Personal Information Protection Commission and the police are being progressed, and affected customers will be notified individually. The impact on business results is undetermined; additional disclosures will be made if impacts are identified.