Leakage of overseas customers' personal information due to unauthorised access
zig-zag,Inc. (the Company)
Part of the system for the cross-border e-commerce service “WorldShopping”. The regions concerned are Taiwan, Hong Kong, the United States, South Korea, China and others.
Unauthorised access by a third party. Deficiencies in the email distribution system and input form were identified as deficiencies in the system that caused the incident.
Company response
No operations were suspended. The Company's services, including WorldShopping, remain available as usual.
The Company is proceeding with the development of measures to prevent recurrence, including conducting a security assessment, while receiving advice from external experts. The establishment of a committee, the committee chair's name and the establishment date are Not disclosed.
The access route used for the unauthorised access was blocked, and deficiencies in the email distribution system and input form were corrected. In addition, the authentication credentials used by the attacker were invalidated and reissued. The Company is proceeding with the development of measures to prevent recurrence, including conducting a security assessment, while receiving advice from external experts. The Company will implement measures to prevent recurrence and work to further strengthen its information management framework.
Related procedures
Reports to the Personal Information Protection Commission and the relevant authorities in countries and regions where reporting is required by law
Personal Information Protection Commission and the relevant authorities in countries and regions where reporting is required by law
The impact of this incident on the Company's financial results is currently under review. The Company will promptly announce any matters that arise requiring disclosure.
The Company will implement measures to prevent recurrence and work to further strengthen its information management framework. If any new matters requiring disclosure are identified, the Company will promptly announce them.
| Item | Details |
|---|---|
| Event name | Leakage of overseas customers' personal information due to unauthorised access |
| Date of occurrence | From 15 to 16 October 2026 |
| Date recognized / date notice received | 16 October 2026 (external suspicious access to the Company's services was detected and an investigation was launched) |
| Subject Entity | zig-zag,Inc. (the Company) |
| Target Locations / Products | Part of the system for the cross-border e-commerce service “WorldShopping”. The regions concerned are Taiwan, Hong Kong, the United States, South Korea, China and others. |
| Cause | Unauthorised access by a third party. Deficiencies in the email distribution system and input form were identified as deficiencies in the system that caused the incident. |
| Impact on Earnings Forecast | The impact of this incident on the Company's financial results is currently under review. The Company will promptly announce any matters that arise requiring disclosure. |
| Type of litigation or proceeding | Reports to the Personal Information Protection Commission and the relevant authorities in countries and regions where reporting is required by law |
| Court or authority | Personal Information Protection Commission and the relevant authorities in countries and regions where reporting is required by law |
| Suspended operations | No operations were suspended. The Company's services, including WorldShopping, remain available as usual. |
| Investigation structure | The Company is proceeding with the development of measures to prevent recurrence, including conducting a security assessment, while receiving advice from external experts. The establishment of a committee, the committee chair's name and the establishment date are Not disclosed. |
| Measures to prevent recurrence | The access route used for the unauthorised access was blocked, and deficiencies in the email distribution system and input form were corrected. In addition, the authentication credentials used by the attacker were invalidated and reissued. The Company is proceeding with the development of measures to prevent recurrence, including conducting a security assessment, while receiving advice from external experts. The Company will implement measures to prevent recurrence and work to further strengthen its information management framework. |
| Outlook | The Company will implement measures to prevent recurrence and work to further strengthen its information management framework. If any new matters requiring disclosure are identified, the Company will promptly announce them. |
| Planned follow-up disclosure | If any new matters requiring disclosure are identified, the Company will promptly announce them. |
Items this document does not state (11)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.There was unauthorised access by a third party. Deficiencies in the email distribution system and input form were identified as deficiencies in the system that caused the incident.