External leakage of personal information due to unauthorised access at a consolidated subsidiary
株式会社トラストバンク (a consolidated subsidiary of CHANGE Holdings,Inc.)
“Furusato Choice” and related services, the integrated system connecting to partner sites, and the donation management system
Unauthorized access
Company response
“Furusato Choice” and related services were temporarily suspended following detection of the unauthorized access. Other services, including the site for donors, remain temporarily suspended.
The integrated system connecting to partner sites resumed operations on 28 October 2026. The resumption of other services will be announced once decided.
A detailed investigation is being conducted with the assistance of external experts and specialist organizations.
Measures to prevent recurrence are being implemented.
Fiscal year ending March 2027 (the impact on consolidated results is currently under review)
Currently under review. If any matter requiring disclosure arises, it will be promptly announced.
The Company will continue working on the detailed investigation, measures to prevent recurrence and restoration of trust. If the investigation identifies any new facts, they will be promptly announced once confirmed.
If any matters requiring disclosure arise, they will be reported promptly.
| Item | Details |
|---|---|
| Event name | External leakage of personal information due to unauthorised access at a consolidated subsidiary |
| Subject Entity | 株式会社トラストバンク (a consolidated subsidiary of CHANGE Holdings,Inc.) |
| Target Locations / Products | “Furusato Choice” and related services, the integrated system connecting to partner sites, and the donation management system |
| Cause | Unauthorized access |
| Accounting period in which recognized | Fiscal year ending March 2027 (the impact on consolidated results is currently under review) |
| Impact on Earnings Forecast | Currently under review. If any matter requiring disclosure arises, it will be promptly announced. |
| Suspended operations | “Furusato Choice” and related services were temporarily suspended following detection of the unauthorized access. Other services, including the site for donors, remain temporarily suspended. |
| Scheduled resumption date | The integrated system connecting to partner sites resumed operations on 28 October 2026. The resumption of other services will be announced once decided. |
| Investigation structure | A detailed investigation is being conducted with the assistance of external experts and specialist organizations. |
| Measures to prevent recurrence | Measures to prevent recurrence are being implemented. |
| Outlook | The Company will continue working on the detailed investigation, measures to prevent recurrence and restoration of trust. If the investigation identifies any new facts, they will be promptly announced once confirmed. |
| Planned follow-up disclosure | If any matters requiring disclosure arise, they will be reported promptly. |
Items this document does not state (13)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.Because the necessary security measures were implemented and verified with the cooperation of external experts and specialist organizations, and the safety required to resume operations was confirmed.