Unauthorized access (Booking.com account)
Hotels operated by the Company Group (the names of the individual legal entities are Not disclosed)
The Booking.com group account and multiple hotels operated by the Company Group
Unauthorized access to the Booking.com account by a third party. Multiple possibilities, including the access route and related systems, are currently under investigation.
Approximately ¥9 million loss (the accounting classification is Not disclosed)
The impact of this matter on the Company's earnings forecast is expected to be immaterial.
Approximately ¥9 million (part of the accounts receivable that the Company was originally expected to receive; a loss resulted from the fraudulent transfer)
Company response
The Company is conducting an investigation and has requested Booking.com to disclose access logs. The establishment of a third-party committee or special investigation committee is Not disclosed.
・Change the account passwords for Booking.com and related systems at all hotels ・Request Booking.com to disclose access logs and conduct an investigation ・Prevent the spread of damage and continue to assess the scope of the impact
Related procedures
Relevant authorities (the names are Not disclosed)
The Company will consult with the relevant authorities, discuss future measures with Booking.com's operating company, prevent the spread of damage, and continue to assess the scope of the impact. Once the presence or scope of any personal information leak is determined, the Company will respond appropriately and disclose information in a timely manner as necessary.
The Company will promptly notify stakeholders if any matters requiring disclosure arise. Once the presence or scope of any personal information leak is determined, the Company will disclose information in a timely manner as necessary.
| Item | Details |
|---|---|
| Event name | Unauthorized access (Booking.com account) |
| Date of occurrence | 23 May 2026 (the date an anomaly in the Booking.com group account was detected; the actual date of the unauthorized access is Not disclosed) |
| Date recognized / date notice received | 23 May 2026 |
| Subject Entity | Hotels operated by the Company Group (the names of the individual legal entities are Not disclosed) |
| Target Locations / Products | The Booking.com group account and multiple hotels operated by the Company Group |
| Cause | Unauthorized access to the Booking.com account by a third party. Multiple possibilities, including the access route and related systems, are currently under investigation. |
| Amount of Impact on Business Performance | Approximately ¥9 million loss (the accounting classification is Not disclosed) |
| Impact on Earnings Forecast | The impact of this matter on the Company's earnings forecast is expected to be immaterial. |
| Court or authority | Relevant authorities (the names are Not disclosed) |
| Amount of receivables at risk of non-collection or delayed collection | Approximately ¥9 million (part of the accounts receivable that the Company was originally expected to receive; a loss resulted from the fraudulent transfer) |
| Investigation structure | The Company is conducting an investigation and has requested Booking.com to disclose access logs. The establishment of a third-party committee or special investigation committee is Not disclosed. |
| Measures to prevent recurrence | ・Change the account passwords for Booking.com and related systems at all hotels ・Request Booking.com to disclose access logs and conduct an investigation ・Prevent the spread of damage and continue to assess the scope of the impact |
| Outlook | The Company will consult with the relevant authorities, discuss future measures with Booking.com's operating company, prevent the spread of damage, and continue to assess the scope of the impact. Once the presence or scope of any personal information leak is determined, the Company will respond appropriately and disclose information in a timely manner as necessary. |
| Planned follow-up disclosure | The Company will promptly notify stakeholders if any matters requiring disclosure arise. Once the presence or scope of any personal information leak is determined, the Company will disclose information in a timely manner as necessary. |
Items this document does not state (11)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.A third party gained unauthorized access to the Booking.com account, altered the account designated to receive hotel revenues to a third-party account, and caused fraudulent transfers. The Company is investigating multiple possibilities regarding the access route and related systems.