Information leakage and service suspension caused by unauthorized access to Arara Message, an email delivery service provided by a consolidated subsidiary
アララ株式会社 (consolidated subsidiary)
1 server system supporting Arara Message (email delivery service)
A third party exploited a vulnerability in a web server in part of the subsidiary’s system environment.
Company response
Suspension of the Arara Message service. The affected server was immediately disconnected from the network. Scope and period: Not disclosed
Working with an external specialist organisation. Organisation name and establishment date: Not disclosed
We will recheck vulnerabilities across all services, strengthen our security management framework and make every effort to prevent a recurrence. We will also share information about the attack in this incident with customer companies and the relevant authorities and organisations to help prevent similar damage.
The impact of this incident on our financial results will be investigated in detail, and we will promptly disclose any matters that should be disclosed.
We will continue investigating the details of the impact of the unauthorized access. In cooperation with an external specialist organisation, we will recheck vulnerabilities across all services, strengthen our security management framework and share information with relevant parties and organisations.
We will promptly disclose any newly identified facts.
| Item | Details |
|---|---|
| Event name | Information leakage and service suspension caused by unauthorized access to Arara Message, an email delivery service provided by a consolidated subsidiary |
| Date of occurrence | 28 October 2026. The date on which the unauthorized access was confirmed. |
| Date recognized / date notice received | 28 October 2026 |
| Subject Entity | アララ株式会社 (consolidated subsidiary) |
| Target Locations / Products | 1 server system supporting Arara Message (email delivery service) |
| Cause | A third party exploited a vulnerability in a web server in part of the subsidiary’s system environment. |
| Impact on Earnings Forecast | The impact of this incident on our financial results will be investigated in detail, and we will promptly disclose any matters that should be disclosed. |
| Suspended operations | Suspension of the Arara Message service. The affected server was immediately disconnected from the network. Scope and period: Not disclosed |
| Investigation structure | Working with an external specialist organisation. Organisation name and establishment date: Not disclosed |
| Measures to prevent recurrence | We will recheck vulnerabilities across all services, strengthen our security management framework and make every effort to prevent a recurrence. We will also share information about the attack in this incident with customer companies and the relevant authorities and organisations to help prevent similar damage. |
| Outlook | We will continue investigating the details of the impact of the unauthorized access. In cooperation with an external specialist organisation, we will recheck vulnerabilities across all services, strengthen our security management framework and share information with relevant parties and organisations. |
| Planned follow-up disclosure | We will promptly disclose any newly identified facts. |
Items this document does not state (13)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.A third party exploited a vulnerability in a web server in part of the subsidiary's system environment.