Unauthorized access and information leakage
UNIRITA Inc.
A specific SaaS-based document management system. The leaked information includes personal information of customers and external parties, contract information, authentication information, information contained in quotations and proposals, and information on the Company's employees.
The theft of the Company's confidential information by a third party and unauthorized access to a specific SaaS-based document management system. Details of the attack method have not been disclosed.
No amount has been stated. The impact on financial performance is under review.
There is no impact on performance for the current interim period, and the impact has not been reflected in the consolidated earnings forecast for the fiscal year ending March 2027. If any revision to the earnings forecast or other development becomes necessary, the Company will disclose it promptly.
Related procedures
Reports to the relevant authorities
The relevant authorities, including the Personal Information Protection Commission
Company response
The Company has established an Information Security Response Headquarters and, with the assistance of external experts, is analyzing the leaked files, investigating the cause, and assessing the scope of the impact.
Permanent measures to prevent recurrence, including measures to prevent the damage from spreading, such as blocking access, enhanced network monitoring, comprehensive reviews of account logs, and strengthened system monitoring and defense capabilities.
Individual notifications to the remaining affected individuals will begin on 24 November 2026. The Company will continue reporting to the relevant authorities, cooperating with external experts, conducting investigations, and strengthening its system monitoring and defense capabilities.
After the investigation is completed, the Company will provide a further report on the results of the investigation and the specific details of the measures to prevent recurrence. If any new fact requiring disclosure is identified, the Company will announce it promptly.
| Item | Details |
|---|---|
| Event name | Unauthorized access and information leakage |
| Date of occurrence | 28 September 2026 (the date on which the unauthorized access and data theft were identified) |
| Date recognized / date notice received | 28 September 2026 (the date on which the Company confirmed the public disclosure of the theft of confidential information by a third party and identified the unauthorized access and data theft) |
| Subject Entity | UNIRITA Inc. |
| Target Locations / Products | A specific SaaS-based document management system. The leaked information includes personal information of customers and external parties, contract information, authentication information, information contained in quotations and proposals, and information on the Company's employees. |
| Cause | The theft of the Company's confidential information by a third party and unauthorized access to a specific SaaS-based document management system. Details of the attack method have not been disclosed. |
| Amount of Impact on Business Performance | No amount has been stated. The impact on financial performance is under review. |
| Impact on Earnings Forecast | There is no impact on performance for the current interim period, and the impact has not been reflected in the consolidated earnings forecast for the fiscal year ending March 2027. If any revision to the earnings forecast or other development becomes necessary, the Company will disclose it promptly. |
| Type of litigation or proceeding | Reports to the relevant authorities |
| Court or authority | The relevant authorities, including the Personal Information Protection Commission |
| Investigation structure | The Company has established an Information Security Response Headquarters and, with the assistance of external experts, is analyzing the leaked files, investigating the cause, and assessing the scope of the impact. |
| Measures to prevent recurrence | Permanent measures to prevent recurrence, including measures to prevent the damage from spreading, such as blocking access, enhanced network monitoring, comprehensive reviews of account logs, and strengthened system monitoring and defense capabilities. |
| Outlook | Individual notifications to the remaining affected individuals will begin on 24 November 2026. The Company will continue reporting to the relevant authorities, cooperating with external experts, conducting investigations, and strengthening its system monitoring and defense capabilities. |
| Planned follow-up disclosure | After the investigation is completed, the Company will provide a further report on the results of the investigation and the specific details of the measures to prevent recurrence. If any new fact requiring disclosure is identified, the Company will announce it promptly. |
Items this document does not state (11)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.A third party stole the Company's confidential information, resulting in unauthorized access to and data theft from a specific SaaS-based document management system. Details of the cause, including the attack method, have not been disclosed.