Notice Regarding Unauthorized Access to a System Provided by the Company
TRADE WORKS Co.,Ltd (system provider), 岩井コスモ証券株式会社 (user company)
Internet trading system provided to 岩井コスモ証券株式会社
Certain administrative functions of the company's system had configuration deficiencies and were exploited by a third party. This resulted from inadequate controls by the company.
Company response
Suspension of use of the exploited administrative functions
The company is proceeding with the investigation, including inspections by external specialist organisations. No information has been disclosed regarding a third-party committee or special investigation committee.
Suspension of use of the exploited administrative functions. Disabling illegally established connections and blocking communications from the source of the attack. Strengthening measures against unauthorized access based on the characteristics of the attacker. Re-inspection of vulnerable areas. Strengthening the security management system and preventing recurrence. Sharing information with relevant organisations to prevent similar damage.
The impact of this matter on the company's earnings will be reviewed, and the company will promptly announce any matters requiring disclosure.
The company will work with 岩井コスモ証券株式会社 and external specialist organisations to re-inspect vulnerable areas, strengthen its security management system and prevent recurrence. It will share information on the attack with relevant organisations and work to prevent similar damage.
The company will promptly announce any newly discovered facts. It will also promptly announce any matters requiring disclosure concerning the impact on earnings.
| Item | Details |
|---|---|
| Event name | Notice Regarding Unauthorized Access to a System Provided by the Company |
| Date of occurrence | 14 October 2026 (Wednesday) (the date unauthorized access was detected) |
| Date recognized / date notice received | 14 October 2026 (Wednesday) (the date the company detected unauthorized access) |
| Subject Entity | TRADE WORKS Co.,Ltd (system provider), 岩井コスモ証券株式会社 (user company) |
| Target Locations / Products | Internet trading system provided to 岩井コスモ証券株式会社 |
| Cause | Certain administrative functions of the company's system had configuration deficiencies and were exploited by a third party. This resulted from inadequate controls by the company. |
| Impact on Earnings Forecast | The impact of this matter on the company's earnings will be reviewed, and the company will promptly announce any matters requiring disclosure. |
| Suspended operations | Suspension of use of the exploited administrative functions |
| Investigation structure | The company is proceeding with the investigation, including inspections by external specialist organisations. No information has been disclosed regarding a third-party committee or special investigation committee. |
| Measures to prevent recurrence | Suspension of use of the exploited administrative functions. Disabling illegally established connections and blocking communications from the source of the attack. Strengthening measures against unauthorized access based on the characteristics of the attacker. Re-inspection of vulnerable areas. Strengthening the security management system and preventing recurrence. Sharing information with relevant organisations to prevent similar damage. |
| Outlook | The company will work with 岩井コスモ証券株式会社 and external specialist organisations to re-inspect vulnerable areas, strengthen its security management system and prevent recurrence. It will share information on the attack with relevant organisations and work to prevent similar damage. |
| Planned follow-up disclosure | The company will promptly announce any newly discovered facts. It will also promptly announce any matters requiring disclosure concerning the impact on earnings. |
Items this document does not state (13)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.Certain administrative functions of the company's system had configuration deficiencies and were exploited by a third party. The company explained that its own controls were inadequate.