Komori
Occurring Fact3962CHANGE Holdings,Inc.Information and Communications, Services and Others

Notice Concerning the External Leakage of Personal Information Due to Unauthorized Access at a Consolidated Subsidiary (Report No. 5)

Donation acceptance on the web version of Furusato Choice (a hometown-tax donation service), which had been suspended following the unauthorized access, will resume at 12:00 on 6 November 2026. The app version and Choice Pay remain suspended, while the detailed investigation and measures to prevent recurrence continue.

Worth reading
49Recurring
0–100. This measures how worthwhile something is to read, not how good or bad the company is.
Direction
Mixed performance
Direction inferred from the company’s description.
Scale
4454097
Engagements
Wording
Avoiding a definitive answer
How definitive the wording is.

External leakage of personal information due to unauthorised access at a consolidated subsidiary

Subject Entity

株式会社トラストバンク (consolidated subsidiary of the Company)

Target Locations / Products

Furusato Choice and related services (web version, app version and Choice Pay)

This disclosure11/05/2026
Cause

Unauthorized access

Company response

Suspended operations

Furusato Choice and related services were temporarily suspended. The app version and Choice Pay remain suspended.

Scheduled resumption date

Donation acceptance on the web version of Furusato Choice will resume from 12:00 on 6 November 2026. The app version and Choice Pay are scheduled to resume once preparations are complete.

Investigation structure

The detailed investigation is continuing with the cooperation of external experts and specialist organisations.

Measures to prevent recurrence

Strengthening system monitoring and conducting continuous system inspections and improvements, among other measures.

Accounting period in which recognized

Fiscal year ending March 2027

Impact on Earnings Forecast

The impact of this matter on the Company's consolidated results for the fiscal year ending March 2027 is currently under review.

Outlook

The Company will proceed with the detailed investigation and work to ensure service security and restore trust. If any new facts come to light, they will be disclosed promptly once the details have been confirmed.

Planned follow-up disclosure

A final report concerning the unauthorized access is scheduled to be provided to investors at a later date. If any new facts come to light, they will be disclosed promptly.

Number of personal information records, etc. confirmed to have been leaked externally or otherwise

4,454,097 cases

Event that occurred
ItemDetails
Event nameExternal leakage of personal information due to unauthorised access at a consolidated subsidiary
Subject Entity株式会社トラストバンク (consolidated subsidiary of the Company)
Target Locations / ProductsFurusato Choice and related services (web version, app version and Choice Pay)
CauseUnauthorized access
Accounting period in which recognizedFiscal year ending March 2027
Impact on Earnings ForecastThe impact of this matter on the Company's consolidated results for the fiscal year ending March 2027 is currently under review.
Suspended operationsFurusato Choice and related services were temporarily suspended. The app version and Choice Pay remain suspended.
Scheduled resumption dateDonation acceptance on the web version of Furusato Choice will resume from 12:00 on 6 November 2026. The app version and Choice Pay are scheduled to resume once preparations are complete.
Investigation structureThe detailed investigation is continuing with the cooperation of external experts and specialist organisations.
Measures to prevent recurrenceStrengthening system monitoring and conducting continuous system inspections and improvements, among other measures.
OutlookThe Company will proceed with the detailed investigation and work to ensure service security and restore trust. If any new facts come to light, they will be disclosed promptly once the details have been confirmed.
Planned follow-up disclosureA final report concerning the unauthorized access is scheduled to be provided to investors at a later date. If any new facts come to light, they will be disclosed promptly.
Number of personal information records, etc. confirmed to have been leaked externally or otherwise4,454,097 cases
Items this document does not state (13)
Date of occurrenceDate recognized / date notice receivedAmount of Impact on Business PerformanceType of litigation or proceedingCourt or authorityPlaintiffDefendantDate of filing / date of actionClaim amount / surcharge amountAmount of receivables at risk of non-collection or delayed collectionDirectors' and officers' liabilityVoting rights ownership percentage before the changeVoting rights ownership percentage after the change

These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.

The reasons the company gives

The company's own explanation, not something inferred from the numbers.

Because, with the cooperation of external experts and specialist organisations, security measures and their verification were carried out, and the safety of resuming operation of the web version was confirmed.

How to read this page

This is not the documentKomori reads the disclosure the company filed and writes this summary. Figures are as stated by the company and are not audited.
Weight is not a verdictIt measures how much this changes what the company had already told the market. It is not a view on the shares.
Corrections happenIf the company reissues this disclosure, the page is rebuilt from the corrected version and the revision number moves up.