Apology and Report Regarding the Detection of Unauthorized Access Caused by a Cyberattack and the Potential Leakage of Information
CYND Co.,Ltd. (the filing company)
The cloud-based appointment management system “BeautyMerit” for beauty and hair salons, and users’ personal information managed through the system
Unauthorized access resulting from an external cyberattack
Company response
None. No functions of “BeautyMerit” have been affected by this matter, and the system is operating as usual. The unauthorized access route has been blocked, and suspicious operations and processes by third parties have been stopped.
The Company has commissioned an external security specialist to conduct an advanced investigation, including log analysis and other forensic procedures. An objective and detailed review by a third party is being conducted.
The Company has already implemented the security measures currently considered necessary, including strengthening network monitoring and imposing additional access restrictions on the system. Effective measures to prevent recurrence will be implemented based on the findings of the specialist investigation.
Fiscal year ending March 2026
The impact of this matter on the consolidated results of the Company’s group for the fiscal year ending March 2026 is currently considered to be minor. The Company will promptly disclose any new matters requiring disclosure.
Related procedures
Report on the potential leakage of information to the Personal Information Protection Commission and notification of cyberattack damage to the police station with jurisdiction
Personal Information Protection Commission, police station with jurisdiction
The Company will continue its investigation and cooperate with investigative authorities and other relevant parties. Facts as they are confirmed will be disclosed from time to time through the corporate website and other channels, and effective measures to prevent recurrence will be implemented based on the findings of the investigation.
The Company will provide a further report once the facts have been accurately established. Facts as they are confirmed will be disclosed from time to time through the corporate website and other channels.
| Item | Details |
|---|---|
| Event name | Apology and Report Regarding the Detection of Unauthorized Access Caused by a Cyberattack and the Potential Leakage of Information |
| Date of occurrence | 10 March 2026 (the date on which suspicious access to the Company’s systems was detected) |
| Date recognized / date notice received | 10 March 2026 (the date on which suspicious access to the Company’s systems was detected) |
| Subject Entity | CYND Co.,Ltd. (the filing company) |
| Target Locations / Products | The cloud-based appointment management system “BeautyMerit” for beauty and hair salons, and users’ personal information managed through the system |
| Cause | Unauthorized access resulting from an external cyberattack |
| Accounting period in which recognized | Fiscal year ending March 2026 |
| Impact on Earnings Forecast | The impact of this matter on the consolidated results of the Company’s group for the fiscal year ending March 2026 is currently considered to be minor. The Company will promptly disclose any new matters requiring disclosure. |
| Type of litigation or proceeding | Report on the potential leakage of information to the Personal Information Protection Commission and notification of cyberattack damage to the police station with jurisdiction |
| Court or authority | Personal Information Protection Commission, police station with jurisdiction |
| Suspended operations | None. No functions of “BeautyMerit” have been affected by this matter, and the system is operating as usual. The unauthorized access route has been blocked, and suspicious operations and processes by third parties have been stopped. |
| Investigation structure | The Company has commissioned an external security specialist to conduct an advanced investigation, including log analysis and other forensic procedures. An objective and detailed review by a third party is being conducted. |
| Measures to prevent recurrence | The Company has already implemented the security measures currently considered necessary, including strengthening network monitoring and imposing additional access restrictions on the system. Effective measures to prevent recurrence will be implemented based on the findings of the specialist investigation. |
| Outlook | The Company will continue its investigation and cooperate with investigative authorities and other relevant parties. Facts as they are confirmed will be disclosed from time to time through the corporate website and other channels, and effective measures to prevent recurrence will be implemented based on the findings of the investigation. |
| Planned follow-up disclosure | The Company will provide a further report once the facts have been accurately established. Facts as they are confirmed will be disclosed from time to time through the corporate website and other channels. |
Items this document does not state (10)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.Unauthorized access resulting from an external cyberattack occurred.