Personal information breach caused by unauthorized access to our systems
Treasure Factory Co.,LTD. (the Company)
The case management systems for on-site purchases and the Trefac Moving relocation service
A third party exploited a vulnerability related to access to the database. The detailed cause and scope of the impact remain under investigation. There is no connection with recently disclosed PHP vulnerabilities.
Company response
External access to the case management system was suspended at 10:30 on 20 October 2026. Acceptance of applications through the forms for on-site purchases, moving services and other services was suspended at 11:05.
Scheduled to resume by 28 October 2026
We are continuing to investigate the detailed cause and scope of the impact in cooperation with an external security specialist. The status of a third-party committee or special investigation committee is Not disclosed.
Measures to address the vulnerability exploited in this incident; enhanced security for login functions; enhanced monitoring of suspicious access; strengthened authentication management, access-rights management and monitoring systems; vulnerability management for systems exposed externally; vulnerability assessments; defenses using WAF and other measures; security measures for applications and databases; and further strengthening of information security management across the Company’s group
Related procedures
Reporting to the Personal Information Protection Commission and consultation with and reporting to the police and other relevant authorities
Personal Information Protection Commission, police and other relevant authorities
The impact on results is currently under review. If it becomes clear that the incident will have a material impact on results, or if any other matter requiring disclosure arises, we will promptly announce it.
After implementing and confirming the necessary security measures, the systems and application forms are scheduled to resume by 28 October 2026. We will proceed with reporting to the Personal Information Protection Commission, consultation with and reporting to the police and other authorities, individual notification to affected parties, preparations to establish a dedicated inquiry desk, an investigation in cooperation with an external security specialist, and the strengthening of our information security management system.
If it becomes clear that the incident will have a material impact on results, or if any other matter requiring disclosure arises, we will promptly announce it. Details of the inquiry desk will be provided promptly on the Company’s website once the necessary arrangements are in place.
| Item | Details |
|---|---|
| Event name | Personal information breach caused by unauthorized access to our systems |
| Date of occurrence | 20 October 2026 (unauthorized access occurred from the early morning through the morning of the same day) |
| Date recognized / date notice received | 20 October 2026 (confirmed through an investigation of access logs) |
| Subject Entity | Treasure Factory Co.,LTD. (the Company) |
| Target Locations / Products | The case management systems for on-site purchases and the Trefac Moving relocation service |
| Cause | A third party exploited a vulnerability related to access to the database. The detailed cause and scope of the impact remain under investigation. There is no connection with recently disclosed PHP vulnerabilities. |
| Impact on Earnings Forecast | The impact on results is currently under review. If it becomes clear that the incident will have a material impact on results, or if any other matter requiring disclosure arises, we will promptly announce it. |
| Type of litigation or proceeding | Reporting to the Personal Information Protection Commission and consultation with and reporting to the police and other relevant authorities |
| Court or authority | Personal Information Protection Commission, police and other relevant authorities |
| Suspended operations | External access to the case management system was suspended at 10:30 on 20 October 2026. Acceptance of applications through the forms for on-site purchases, moving services and other services was suspended at 11:05. |
| Scheduled resumption date | Scheduled to resume by 28 October 2026 |
| Investigation structure | We are continuing to investigate the detailed cause and scope of the impact in cooperation with an external security specialist. The status of a third-party committee or special investigation committee is Not disclosed. |
| Measures to prevent recurrence | Measures to address the vulnerability exploited in this incident; enhanced security for login functions; enhanced monitoring of suspicious access; strengthened authentication management, access-rights management and monitoring systems; vulnerability management for systems exposed externally; vulnerability assessments; defenses using WAF and other measures; security measures for applications and databases; and further strengthening of information security management across the Company’s group |
| Outlook | After implementing and confirming the necessary security measures, the systems and application forms are scheduled to resume by 28 October 2026. We will proceed with reporting to the Personal Information Protection Commission, consultation with and reporting to the police and other authorities, individual notification to affected parties, preparations to establish a dedicated inquiry desk, an investigation in cooperation with an external security specialist, and the strengthening of our information security management system. |
| Planned follow-up disclosure | If it becomes clear that the incident will have a material impact on results, or if any other matter requiring disclosure arises, we will promptly announce it. Details of the inquiry desk will be provided promptly on the Company’s website once the necessary arrangements are in place. |
Items this document does not state (10)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.Based on the investigation to date, we believe that the cause was the exploitation by a third party of a vulnerability related to access to the database.