Notice Regarding Unauthorized Access to Our Service Information Website
Thinca Co.,Ltd. (filing company)
Service information website https://kaiwa.cloud/ (installation of the malicious program confirmed); KAIKURA.mag https://kaiwa.cloud/media/; Car Connect https://carconnect.jp/; and corporate website https://www.thinca.co.jp (suspended as a precaution until security is confirmed). The notice states that there is no impact on KAIKURA services.
Installation of a malicious program by a third party (malware infection). The access route and details of the cause are under investigation.
Company response
From 26 August 2026, access to the KAIKURA service information website, KAIKURA.mag, Car Connect and the corporate website was temporarily suspended.
The corporate website is scheduled to be relocated to a secure location by 28 August 2026 and made available again on the same day. The other websites will remain suspended until security is confirmed, and the specific resumption dates are Not disclosed.
An external specialist organization and external investigative organization have been engaged to perform log analysis and other work. The organization names, whether a third-party committee or special investigative committee will be established, the committee chair's name and the establishment date are Not disclosed.
Identify the unauthorized access method and access route; determine the scope of the impact in detail, including the affected data and period; and consider technical and operational measures to prevent similar incidents from recurring.
Related procedures
Report to the Personal Information Protection Commission under the Act on the Protection of Personal Information
Personal Information Protection Commission
FY2026 (the fiscal year for which the impact on results is being considered; the specific accounting recognition timing is Not disclosed)
The company will continue investigating the access route, scope of the impact and details of the cause with an external investigative organization, and will formulate measures to prevent recurrence. Operations of KAIKURA and other services will continue. Any new facts that come to light will be disclosed promptly.
Once confirmation is complete, the company plans to disclose additional information on the detailed facts, cause and measures to prevent recurrence. The specific date is Not disclosed.
| Item | Details |
|---|---|
| Event name | Notice Regarding Unauthorized Access to Our Service Information Website |
| Date of occurrence | 24 August 2026 (the date on which the installation of the malicious program was detected; the actual installation date is Not disclosed) |
| Date recognized / date notice received | 24 August 2026 (the malicious program was detected) |
| Subject Entity | Thinca Co.,Ltd. (filing company) |
| Target Locations / Products | Service information website https://kaiwa.cloud/ (installation of the malicious program confirmed); KAIKURA.mag https://kaiwa.cloud/media/; Car Connect https://carconnect.jp/; and corporate website https://www.thinca.co.jp (suspended as a precaution until security is confirmed). The notice states that there is no impact on KAIKURA services. |
| Cause | Installation of a malicious program by a third party (malware infection). The access route and details of the cause are under investigation. |
| Accounting period in which recognized | FY2026 (the fiscal year for which the impact on results is being considered; the specific accounting recognition timing is Not disclosed) |
| Type of litigation or proceeding | Report to the Personal Information Protection Commission under the Act on the Protection of Personal Information |
| Court or authority | Personal Information Protection Commission |
| Suspended operations | From 26 August 2026, access to the KAIKURA service information website, KAIKURA.mag, Car Connect and the corporate website was temporarily suspended. |
| Scheduled resumption date | The corporate website is scheduled to be relocated to a secure location by 28 August 2026 and made available again on the same day. The other websites will remain suspended until security is confirmed, and the specific resumption dates are Not disclosed. |
| Investigation structure | An external specialist organization and external investigative organization have been engaged to perform log analysis and other work. The organization names, whether a third-party committee or special investigative committee will be established, the committee chair's name and the establishment date are Not disclosed. |
| Measures to prevent recurrence | Identify the unauthorized access method and access route; determine the scope of the impact in detail, including the affected data and period; and consider technical and operational measures to prevent similar incidents from recurring. |
| Outlook | The company will continue investigating the access route, scope of the impact and details of the cause with an external investigative organization, and will formulate measures to prevent recurrence. Operations of KAIKURA and other services will continue. Any new facts that come to light will be disclosed promptly. |
| Planned follow-up disclosure | Once confirmation is complete, the company plans to disclose additional information on the detailed facts, cause and measures to prevent recurrence. The specific date is Not disclosed. |
Items this document does not state (10)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.A third party installed malicious programs, one of which had the technical capability to retrieve information from the server. The access route and detailed cause are being investigated with an external specialist organization, and the websites have been temporarily suspended to prevent the risk from spreading and to facilitate the investigation.