Komori
Occurring Fact4193Fabrica Holdings Co.,Ltd.Information and Communications, Services and Others

Notice of Completion of Investigation into Unauthorized Access at a Consolidated Subsidiary (Final Report)

The investigation by a third-party specialist organization into unauthorized access to the SMS delivery system of consolidated subsidiary メディア4u has been completed. The scope of the data leak did not exceed the maximum figure reported in the initial report, and no new unauthorized access or secondary damage has been identified. Accordingly, the Company considers the matter closed.

Worth reading
42Recurring
0–100. This measures how worthwhile something is to read, not how good or bad the company is.
Direction
Neutral
Direction inferred from the company’s description.
Scale
—
Displayed only when the document provides numerical figures.
Wording
Avoiding a definitive answer
How definitive the wording is.

Completion of Investigation into Unauthorized Access at a Consolidated Subsidiary

Subject Entity

株式会社メディア4u (a consolidated subsidiary of the filing company)

Target Locations / Products

SMS delivery system "Aurora SMS CONSOLE"

Occurrence2 November 2026 (investigation completion date)
This disclosure11/02/2026
Cause

Unauthorized access by a third party

Amount of Impact on Business Performance

No amount has been disclosed. The impact on consolidated results for the fiscal year ending March 2027 is currently expected to be immaterial.

Accounting period in which recognized

Fiscal year ending March 2027

Impact on Earnings Forecast

The impact of this matter on our consolidated results for the fiscal year ending March 2027 is currently expected to be immaterial, although it remains under review.

Company response

Investigation structure

An investigation by a third-party specialist organization, including log forensics, was conducted and completed on 2 November 2026.

Measures to prevent recurrence

Security enhancements, including the addition of an automatic IP address blocking function for failed login attempts and stricter password policies; establishment of a specialized security response organization on 1 August 2026; implementation of permanent measures, including expanding the scope of security assessments and reviewing assessment methods; continued monitoring

Outlook

We will implement permanent measures, including expanding the scope of security assessments and reviewing assessment methods, and continue monitoring. The service is operating as usual.

Planned follow-up disclosure

If any matters requiring disclosure arise, they will be reported promptly.

Event that occurred
ItemDetails
Event nameCompletion of Investigation into Unauthorized Access at a Consolidated Subsidiary
Date of occurrence2 November 2026 (investigation completion date)
Subject Entity株式会社メディア4u (a consolidated subsidiary of the filing company)
Target Locations / ProductsSMS delivery system "Aurora SMS CONSOLE"
CauseUnauthorized access by a third party
Amount of Impact on Business PerformanceNo amount has been disclosed. The impact on consolidated results for the fiscal year ending March 2027 is currently expected to be immaterial.
Accounting period in which recognizedFiscal year ending March 2027
Impact on Earnings ForecastThe impact of this matter on our consolidated results for the fiscal year ending March 2027 is currently expected to be immaterial, although it remains under review.
Investigation structureAn investigation by a third-party specialist organization, including log forensics, was conducted and completed on 2 November 2026.
Measures to prevent recurrenceSecurity enhancements, including the addition of an automatic IP address blocking function for failed login attempts and stricter password policies; establishment of a specialized security response organization on 1 August 2026; implementation of permanent measures, including expanding the scope of security assessments and reviewing assessment methods; continued monitoring
OutlookWe will implement permanent measures, including expanding the scope of security assessments and reviewing assessment methods, and continue monitoring. The service is operating as usual.
Planned follow-up disclosureIf any matters requiring disclosure arise, they will be reported promptly.
Items this document does not state (13)
Date recognized / date notice receivedType of litigation or proceedingCourt or authorityPlaintiffDefendantDate of filing / date of actionClaim amount / surcharge amountAmount of receivables at risk of non-collection or delayed collectionSuspended operationsScheduled resumption dateDirectors' and officers' liabilityVoting rights ownership percentage before the changeVoting rights ownership percentage after the change

These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.

The reasons the company gives

The company's own explanation, not something inferred from the numbers.

Log forensics by a third-party specialist organization identified the files taken outside the system. The stated reasons are that the scope of the personal data leak did not expand beyond the maximum figure reported in the initial report and that no new unauthorized access or secondary damage was identified.

How to read this page

This is not the documentKomori reads the disclosure the company filed and writes this summary. Figures are as stated by the company and are not audited.
Weight is not a verdictIt measures how much this changes what the company had already told the market. It is not a view on the shares.
Corrections happenIf the company reissues this disclosure, the page is rebuilt from the corrected version and the revision number moves up.