Possibility that the personal data of customers and applicants using the company’s services was leaked externally
ApplyNow Co., Ltd. (a subsidiary of the filing company)
Recruitment management platforms: “Interview Cloud,” “ApplyNow” and “ApplyNow Sign”
Unauthorized access by a third party exploiting a vulnerability in a data analytics tool used by the company
Related procedures
Legal proceedings regarding the unauthorized access, and reporting to and consultation with the Personal Information Protection Commission and the relevant police station
Personal Information Protection Commission, police station with jurisdiction
Company response
Working with lawyers to determine the full extent of the damage and carry out legal proceedings
Complete blocking of access to the relevant tool, application of an updated security patch addressing the tool’s vulnerability, and a fundamental review of the security management framework
The company will conduct a thorough investigation to determine the full extent of the damage, fundamentally review its security management framework, report to and consult with the relevant authorities, and proceed with individual contact with customers and affected individuals. The results of the investigation and any new measures will be promptly disclosed on the corporate website as progress is made.
The company will promptly provide updates on the corporate website regarding the results of the investigation and any new measures as progress is made.
| Item | Details |
|---|---|
| Event name | Possibility that the personal data of customers and applicants using the company’s services was leaked externally |
| Date of occurrence | 9 August 2026–7 September 2026 (the period during which unauthorized access was confirmed) |
| Date recognized / date notice received | 7 September 2026 (abnormal access logs were detected and investigated, and evidence of unauthorized access was confirmed) |
| Subject Entity | ApplyNow Co., Ltd. (a subsidiary of the filing company) |
| Target Locations / Products | Recruitment management platforms: “Interview Cloud,” “ApplyNow” and “ApplyNow Sign” |
| Cause | Unauthorized access by a third party exploiting a vulnerability in a data analytics tool used by the company |
| Type of litigation or proceeding | Legal proceedings regarding the unauthorized access, and reporting to and consultation with the Personal Information Protection Commission and the relevant police station |
| Court or authority | Personal Information Protection Commission, police station with jurisdiction |
| Investigation structure | Working with lawyers to determine the full extent of the damage and carry out legal proceedings |
| Measures to prevent recurrence | Complete blocking of access to the relevant tool, application of an updated security patch addressing the tool’s vulnerability, and a fundamental review of the security management framework |
| Outlook | The company will conduct a thorough investigation to determine the full extent of the damage, fundamentally review its security management framework, report to and consult with the relevant authorities, and proceed with individual contact with customers and affected individuals. The results of the investigation and any new measures will be promptly disclosed on the corporate website as progress is made. |
| Planned follow-up disclosure | The company will promptly provide updates on the corporate website regarding the results of the investigation and any new measures as progress is made. |
Items this document does not state (13)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.A third party exploited a vulnerability in a data analytics tool used by the company, resulting in unauthorized access.