Personal Information Breach Caused by Unauthorized Access
株式会社ファンケル and 株式会社アテニア
The e-commerce sites of FANCL and ATTENIR
Unauthorized access by a third party
Company response
Suspended the functions affected by the unauthorized access
An emergency response headquarters was established on the day the incident was identified, and a detailed investigation is ongoing. The chair's name is Not disclosed
The entire company will work to prevent a recurrence. We identified the functions affected by the unauthorized access and suspended them. Alongside the ongoing detailed investigation, we are reporting the matter to the Personal Information Protection Commission and consulting with the police.
Related procedures
Report to the Personal Information Protection Commission and consultation with the police
Personal Information Protection Commission and police
The impact of this incident on our consolidated results is currently under review. If a material impact on future results is identified, timely disclosure will be made.
FANCL will continue its detailed investigation and will promptly provide a further update if any new facts come to light. We will report the matter to the Personal Information Protection Commission and consult with the police.
Timely disclosure will be made if new facts come to light or if a material impact on future results is identified.
| Item | Details |
|---|---|
| Event name | Personal Information Breach Caused by Unauthorized Access |
| Date of occurrence | 3 October to 10 October 2026 (period of unauthorized access) |
| Date recognized / date notice received | 15 October 2026 (identified through an internal investigation) |
| Subject Entity | 株式会社ファンケル and 株式会社アテニア |
| Target Locations / Products | The e-commerce sites of FANCL and ATTENIR |
| Cause | Unauthorized access by a third party |
| Impact on Earnings Forecast | The impact of this incident on our consolidated results is currently under review. If a material impact on future results is identified, timely disclosure will be made. |
| Type of litigation or proceeding | Report to the Personal Information Protection Commission and consultation with the police |
| Court or authority | Personal Information Protection Commission and police |
| Suspended operations | Suspended the functions affected by the unauthorized access |
| Investigation structure | An emergency response headquarters was established on the day the incident was identified, and a detailed investigation is ongoing. The chair's name is Not disclosed |
| Measures to prevent recurrence | The entire company will work to prevent a recurrence. We identified the functions affected by the unauthorized access and suspended them. Alongside the ongoing detailed investigation, we are reporting the matter to the Personal Information Protection Commission and consulting with the police. |
| Outlook | FANCL will continue its detailed investigation and will promptly provide a further update if any new facts come to light. We will report the matter to the Personal Information Protection Commission and consult with the police. |
| Planned follow-up disclosure | Timely disclosure will be made if new facts come to light or if a material impact on future results is identified. |
Items this document does not state (11)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.Because the e-commerce sites of FANCL and ATTENIR were subject to unauthorized access by a third party.