Komori
Occurring Fact3962CHANGE Holdings,Inc.Information and Communications, Services and Others

Notice Regarding the External Leakage of Personal Information Due to Unauthorized Access at a Consolidated Subsidiary (Report No. 2)

Among the 5 individuals affected by the previously disclosed personal information leak, the external leakage of additional information, including points history, donation history and card information, has been identified. The partial deletion of the prefecture name in the registered address was also confirmed for 1 individual.

Worth reading
44Recurring
0–100. This measures how worthwhile something is to read, not how good or bad the company is.
Direction
Deterioration
Direction inferred from the company’s description.
Scale
5
Individuals (donors for whom the external leakage of additional information, etc. was identified)
Wording
Avoiding a definitive answer
How definitive the wording is.

Notice Regarding the External Leakage of Personal Information Due to Unauthorized Access at a Consolidated Subsidiary (Second Report)

Subject Entity

株式会社トラストバンク (consolidated subsidiary of the Company)

Target Locations / Products

Member information for “Furusato Choice” and the page displaying saved card information in My Page

Awareness or receipt of notice23 October 2026 (the date on which the additional external leakage, etc. was disclosed; the date on which it was identified is Not disclosed)
This disclosure10/23/2026
Accounting period in which recognized

Fiscal year ending March 2027 (the impact on consolidated results is currently under review)

Impact on Earnings Forecast

The impact of this matter on our consolidated results for the fiscal year ending March 2027 is currently under review. We will promptly disclose any matters that become subject to disclosure.

Company response

Investigation structure

Continuing the detailed investigation with the assistance of external experts

Measures to prevent recurrence

Working to prevent recurrence and restore trust

Outlook

トラストバンク will continue its detailed investigation with the assistance of external experts and work to prevent recurrence and restore trust. We will also coordinate with トラストバンク and take the necessary measures appropriately. If any new facts are identified, we will promptly disclose them once confirmed.

Planned follow-up disclosure

If the investigation identifies any new facts, we will promptly disclose them once confirmed.

Event that occurred
ItemDetails
Event nameNotice Regarding the External Leakage of Personal Information Due to Unauthorized Access at a Consolidated Subsidiary (Second Report)
Date recognized / date notice received23 October 2026 (the date on which the additional external leakage, etc. was disclosed; the date on which it was identified is Not disclosed)
Subject Entity株式会社トラストバンク (consolidated subsidiary of the Company)
Target Locations / ProductsMember information for “Furusato Choice” and the page displaying saved card information in My Page
Accounting period in which recognizedFiscal year ending March 2027 (the impact on consolidated results is currently under review)
Impact on Earnings ForecastThe impact of this matter on our consolidated results for the fiscal year ending March 2027 is currently under review. We will promptly disclose any matters that become subject to disclosure.
Investigation structureContinuing the detailed investigation with the assistance of external experts
Measures to prevent recurrenceWorking to prevent recurrence and restore trust
Outlookトラストバンク will continue its detailed investigation with the assistance of external experts and work to prevent recurrence and restore trust. We will also coordinate with トラストバンク and take the necessary measures appropriately. If any new facts are identified, we will promptly disclose them once confirmed.
Planned follow-up disclosureIf the investigation identifies any new facts, we will promptly disclose them once confirmed.
Items this document does not state (15)
Date of occurrenceCauseAmount of Impact on Business PerformanceType of litigation or proceedingCourt or authorityPlaintiffDefendantDate of filing / date of actionClaim amount / surcharge amountAmount of receivables at risk of non-collection or delayed collectionSuspended operationsScheduled resumption dateDirectors' and officers' liabilityVoting rights ownership percentage before the changeVoting rights ownership percentage after the change

These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.

The reasons the company gives

The company's own explanation, not something inferred from the numbers.

A detailed investigation identified the external leakage of additional information items and the partial deletion of registered addresses.

How to read this page

This is not the documentKomori reads the disclosure the company filed and writes this summary. Figures are as stated by the company and are not audited.
Weight is not a verdictIt measures how much this changes what the company had already told the market. It is not a view on the shares.
Corrections happenIf the company reissues this disclosure, the page is rebuilt from the corrected version and the revision number moves up.
Notice Regarding the External Leakage of Personal Information Due to Unauthorized Access at a Consolidated Subsidiary (Report No. 2) | CHANGE Holdings,Inc. (3962) timely disclosure | Komori