Outlook for the recovery of “NETSEA,” operated by the Company’s consolidated subsidiary
株式会社SynaBiz, a consolidated subsidiary of Aucfan Co.,Ltd.
The B2B transaction platform “NETSEA” and the external cloud service provided by 株式会社IDCフロンティア and used by SynaBiz
The external cloud service used by SynaBiz was hit by a ransomware attack by a third party
Company response
The “NETSEA” service. Suspended since 7 October 2026
Supplier-member logins will resume on a phased basis from 16 November 2026, buyer-member logins will resume on a phased basis from around 18 November 2026, and order acceptance, including payment functions, will resume from 21 November 2026. Some functions are expected to remain restricted for the time being.
株式会社IDCフロンティア commissioned an investigation by an external cybersecurity specialist company
Preventive measures against a PHP vulnerability
No specific amount was disclosed. The impact of lower revenue and expenses related to recovery and rebuilding has been incorporated into the consolidated forecasts for the fiscal year ending September 2027. The specific details and amount of insurance proceeds and compensation have not been determined.
Fiscal year ending September 2027. The incident occurred after the end of the fiscal year ended September 2026 and has no impact on consolidated results for that fiscal year.
The impact has already been incorporated into the consolidated forecasts for the fiscal year ending September 2027, and no revision to the forecasts has been made at this time. There is some uncertainty regarding transaction levels after recovery and the expenses required for recovery and rebuilding. If a revision becomes necessary, it will be announced promptly.
Related procedures
The Information-technology Promotion Agency, Japan (IPA) issued a warning regarding PHP vulnerabilities, but no disposition or order, etc. was Not disclosed
The Company is proceeding with operational testing of the new system built in an alternative environment and restoration of customer data, and will gradually resume member logins and order acceptance as scheduled. Some functions are expected to remain restricted for the time being.
If a revision to the earnings forecast becomes necessary, the Company will announce it promptly. The recovery schedule may change depending on the progress of the work.
| Item | Details |
|---|---|
| Event name | Outlook for the recovery of “NETSEA,” operated by the Company’s consolidated subsidiary |
| Date of occurrence | 7 October 2026 |
| Subject Entity | 株式会社SynaBiz, a consolidated subsidiary of Aucfan Co.,Ltd. |
| Target Locations / Products | The B2B transaction platform “NETSEA” and the external cloud service provided by 株式会社IDCフロンティア and used by SynaBiz |
| Cause | The external cloud service used by SynaBiz was hit by a ransomware attack by a third party |
| Amount of Impact on Business Performance | No specific amount was disclosed. The impact of lower revenue and expenses related to recovery and rebuilding has been incorporated into the consolidated forecasts for the fiscal year ending September 2027. The specific details and amount of insurance proceeds and compensation have not been determined. |
| Accounting period in which recognized | Fiscal year ending September 2027. The incident occurred after the end of the fiscal year ended September 2026 and has no impact on consolidated results for that fiscal year. |
| Impact on Earnings Forecast | The impact has already been incorporated into the consolidated forecasts for the fiscal year ending September 2027, and no revision to the forecasts has been made at this time. There is some uncertainty regarding transaction levels after recovery and the expenses required for recovery and rebuilding. If a revision becomes necessary, it will be announced promptly. |
| Court or authority | The Information-technology Promotion Agency, Japan (IPA) issued a warning regarding PHP vulnerabilities, but no disposition or order, etc. was Not disclosed |
| Suspended operations | The “NETSEA” service. Suspended since 7 October 2026 |
| Scheduled resumption date | Supplier-member logins will resume on a phased basis from 16 November 2026, buyer-member logins will resume on a phased basis from around 18 November 2026, and order acceptance, including payment functions, will resume from 21 November 2026. Some functions are expected to remain restricted for the time being. |
| Investigation structure | 株式会社IDCフロンティア commissioned an investigation by an external cybersecurity specialist company |
| Measures to prevent recurrence | Preventive measures against a PHP vulnerability |
| Outlook | The Company is proceeding with operational testing of the new system built in an alternative environment and restoration of customer data, and will gradually resume member logins and order acceptance as scheduled. Some functions are expected to remain restricted for the time being. |
| Planned follow-up disclosure | If a revision to the earnings forecast becomes necessary, the Company will announce it promptly. The recovery schedule may change depending on the progress of the work. |
Items this document does not state (10)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.The external cloud service provided by 株式会社IDCフロンティア and used by SynaBiz was hit by a ransomware attack by a third party, causing “NETSEA” to be suspended.