Personal Information Leakage and Service Suspension Following Unauthorized Access to Our E-Commerce Site
EDION Corporation
Our e-commerce site, the area containing the e-commerce site's log-file storage server, payment information entry processing for PC environments, the EDION Official App and the EDION Smart App
Unauthorized external access exploiting system vulnerabilities, and the embedding of malware in payment-related processing within the e-commerce site by a third party
Company response
Services on our e-commerce site, the EDION Official App and the EDION Smart App were urgently suspended from 22:00 on 7 November 2026. The e-commerce site remains suspended. The 2 apps have partially resumed, limited to functions including digital membership cards and coupon display.
The e-commerce site's resumption date has not been determined. The EDION Official App and EDION Smart App partially resumed functions from 21:10 on 8 November 2026.
Ongoing monitoring and a detailed investigation are in progress. The establishment of a third-party committee or special investigation committee: Not disclosed.
Requested each affiliated credit card company to strengthen monitoring for unauthorized use; comprehensive checks of linked server environments and file groups; requests for affected customers to change their passwords; urgent suspension of various related services to prevent the damage from spreading
Amount: Not disclosed. The impact on consolidated results is immaterial.
The impact of this matter on our consolidated results is immaterial. We will promptly disclose any matters requiring disclosure in the future.
Related procedures
Additional reports to the Personal Information Protection Commission and the relevant police station (in preparation)
Personal Information Protection Commission, relevant police station
Preparations are under way for additional reports to the Personal Information Protection Commission and the relevant police station. We will report any new facts as soon as they are identified, including the scope of the impact. The future handling of EDION gift cards is currently under consideration, and affected customers will be notified once a policy has been decided.
We will report any new facts as soon as they are identified. We will promptly disclose any matters requiring disclosure.
| Item | Details |
|---|---|
| Event name | Personal Information Leakage and Service Suspension Following Unauthorized Access to Our E-Commerce Site |
| Date of occurrence | Around 18:30 on 5 November 2026 (unauthorized access to the area containing the log-file storage server). The payment-related malware was active from shortly after 19:00 on 4 November 2026. |
| Date recognized / date notice received | 5 November 2026 (the incident in the first report was confirmed). The date the new malware was identified: Not disclosed. |
| Subject Entity | EDION Corporation |
| Target Locations / Products | Our e-commerce site, the area containing the e-commerce site's log-file storage server, payment information entry processing for PC environments, the EDION Official App and the EDION Smart App |
| Cause | Unauthorized external access exploiting system vulnerabilities, and the embedding of malware in payment-related processing within the e-commerce site by a third party |
| Amount of Impact on Business Performance | Amount: Not disclosed. The impact on consolidated results is immaterial. |
| Impact on Earnings Forecast | The impact of this matter on our consolidated results is immaterial. We will promptly disclose any matters requiring disclosure in the future. |
| Type of litigation or proceeding | Additional reports to the Personal Information Protection Commission and the relevant police station (in preparation) |
| Court or authority | Personal Information Protection Commission, relevant police station |
| Suspended operations | Services on our e-commerce site, the EDION Official App and the EDION Smart App were urgently suspended from 22:00 on 7 November 2026. The e-commerce site remains suspended. The 2 apps have partially resumed, limited to functions including digital membership cards and coupon display. |
| Scheduled resumption date | The e-commerce site's resumption date has not been determined. The EDION Official App and EDION Smart App partially resumed functions from 21:10 on 8 November 2026. |
| Investigation structure | Ongoing monitoring and a detailed investigation are in progress. The establishment of a third-party committee or special investigation committee: Not disclosed. |
| Measures to prevent recurrence | Requested each affiliated credit card company to strengthen monitoring for unauthorized use; comprehensive checks of linked server environments and file groups; requests for affected customers to change their passwords; urgent suspension of various related services to prevent the damage from spreading |
| Outlook | Preparations are under way for additional reports to the Personal Information Protection Commission and the relevant police station. We will report any new facts as soon as they are identified, including the scope of the impact. The future handling of EDION gift cards is currently under consideration, and affected customers will be notified once a policy has been decided. |
| Planned follow-up disclosure | We will report any new facts as soon as they are identified. We will promptly disclose any matters requiring disclosure. |
Items this document does not state (9)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.Because unauthorized external access exploiting system vulnerabilities and the embedding of malware in payment-related processing by a third party were confirmed. Services were urgently suspended as a top priority to prevent the damage from spreading.