Toho Holdings Co., Ltd. Notice: Unauthorized Access and Data Leakage at Subsidiary EnTouch Co., Ltd.

Overview of the Incident

Toho Holdings announced that unauthorized third-party access to a database managed by its subsidiary EnTouch Co., Ltd. was confirmed, and that some information related to the remote detailing business was leaked externally. Information that may have been leaked potentially includes healthcare professionals' names, affiliations, and prefecture locations; information on administrators and eMR; contact details provided at the time of reservation; names of products reserved and pharmaceutical company names; and reservation creation and meeting dates, times, and statuses. No data alteration or deletion has been confirmed, and EnTouch's business continuity is not affected. Many matters remain under investigation, and the company is working with external specialized organizations to determine the cause and consider measures to prevent recurrence.

Response and Future Actions

EnTouch has immediately implemented security measures, preserved access logs, enforced password resets for all accounts, consulted with the Tokyo Metropolitan Police Department Cyber Crime Division, and reported to the Personal Information Protection Commission. Going forward, a forensic investigation will be advanced to identify the scope of impact and consider countermeasures. The company will alert stakeholders to suspicious emails and promptly disclose any newly discovered facts.