External leakage of personal information due to unauthorised access at a consolidated subsidiary
株式会社トラストバンク (consolidated subsidiary of the Company)
“Furusato Choice” and related services, and the donation management system
Company response
Temporary suspension of “Furusato Choice” and related services. Other services also remain temporarily suspended.
The donation management system resumed operations on 26 October 2026. The company will announce the resumption of other services once decided.
A detailed investigation is being conducted with the assistance of external experts and specialist organizations.
The company will work to prevent a recurrence and restore trust.
Fiscal year ending March 2027
The impact of this matter on the company’s consolidated results for the fiscal year ending March 2027 is currently under review.
The detailed investigation will continue, and services will resume in stages toward full system recovery. If new facts are identified, the company will promptly announce them once confirmed.
The company will report sequentially on the phased resumption of services through full system recovery and will promptly disclose any matters requiring disclosure.
4,454,097 cases. In addition to membership information, the external leakage of points histories and other data relating to 5 people was confirmed.
| Item | Details |
|---|---|
| Event name | External leakage of personal information due to unauthorised access at a consolidated subsidiary |
| Subject Entity | 株式会社トラストバンク (consolidated subsidiary of the Company) |
| Target Locations / Products | “Furusato Choice” and related services, and the donation management system |
| Accounting period in which recognized | Fiscal year ending March 2027 |
| Impact on Earnings Forecast | The impact of this matter on the company’s consolidated results for the fiscal year ending March 2027 is currently under review. |
| Suspended operations | Temporary suspension of “Furusato Choice” and related services. Other services also remain temporarily suspended. |
| Scheduled resumption date | The donation management system resumed operations on 26 October 2026. The company will announce the resumption of other services once decided. |
| Investigation structure | A detailed investigation is being conducted with the assistance of external experts and specialist organizations. |
| Measures to prevent recurrence | The company will work to prevent a recurrence and restore trust. |
| Outlook | The detailed investigation will continue, and services will resume in stages toward full system recovery. If new facts are identified, the company will promptly announce them once confirmed. |
| Planned follow-up disclosure | The company will report sequentially on the phased resumption of services through full system recovery and will promptly disclose any matters requiring disclosure. |
| Personal information and other data leaked externally | 4,454,097 cases. In addition to membership information, the external leakage of points histories and other data relating to 5 people was confirmed. |
Items this document does not state (14)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.Necessary security measures and verification were conducted with the assistance of external experts and specialist organizations, and the system’s safety for resuming operations was confirmed.