Unauthorized access to a system provided by our consolidated subsidiary
株式会社バリューデザイン (our consolidated subsidiary)
Server for the “Value Card” in-house electronic money issuance service
A third party exploited a vulnerability in a web server in part of the subsidiary’s system environment.
Company response
Cooperation with external specialists
The Company will recheck vulnerabilities across all services and make every effort to strengthen its security management systems and prevent recurrence. It will also share information on the attack in this incident with customer companies and relevant authorities and work to prevent similar damage.
The Company will recheck vulnerabilities across all services, strengthen its security management systems and work to prevent recurrence. It will share information on the attack in this incident with customer companies and relevant authorities. Any newly identified facts will be promptly disclosed.
Any newly identified facts will be promptly disclosed. The Company will also promptly disclose any matter requiring disclosure concerning the impact on business performance.
| Item | Details |
|---|---|
| Event name | Unauthorized access to a system provided by our consolidated subsidiary |
| Date of occurrence | 19 October (date confirmed and date the Company became aware of the incident; actual date of occurrence: Not disclosed) |
| Date recognized / date notice received | 19 October (date confirmed) |
| Subject Entity | 株式会社バリューデザイン (our consolidated subsidiary) |
| Target Locations / Products | Server for the “Value Card” in-house electronic money issuance service |
| Cause | A third party exploited a vulnerability in a web server in part of the subsidiary’s system environment. |
| Investigation structure | Cooperation with external specialists |
| Measures to prevent recurrence | The Company will recheck vulnerabilities across all services and make every effort to strengthen its security management systems and prevent recurrence. It will also share information on the attack in this incident with customer companies and relevant authorities and work to prevent similar damage. |
| Outlook | The Company will recheck vulnerabilities across all services, strengthen its security management systems and work to prevent recurrence. It will share information on the attack in this incident with customer companies and relevant authorities. Any newly identified facts will be promptly disclosed. |
| Planned follow-up disclosure | Any newly identified facts will be promptly disclosed. The Company will also promptly disclose any matter requiring disclosure concerning the impact on business performance. |
Items this document does not state (15)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.A third party exploited a vulnerability in a web server in part of the subsidiary’s system environment.