Apology and Report Regarding the Detection of Unauthorized Access Caused by a Cyberattack and the Possibility of Information Leakage (Second Report)
CYND Co.,Ltd.
BeautyMerit, a cloud-based appointment management system for hair and beauty salons
Unauthorized access caused by a cyberattack. The detailed cause is not disclosed.
Minor (impact on the consolidated results of the Company's group)
Fiscal year ending March 2026
The impact of this matter on the consolidated results of the Company's group is currently considered minor. If any matter requiring disclosure arises, we will promptly announce it.
Company response
Forensic investigation by an external security specialist
Reviewing and tightening communication routes; reviewing various security policies and authentication methods; strengthening the security monitoring framework; conducting comprehensive vulnerability assessments; and other measures
We will notify the affected users in sequence in coordination with the hair and beauty salons. We will continue monitoring the possibility of information leakage outside the system. We will implement and strengthen initiatives to prevent recurrence and restore trust.
If any matter requiring disclosure arises, we will promptly announce it.
| Item | Details |
|---|---|
| Event name | Apology and Report Regarding the Detection of Unauthorized Access Caused by a Cyberattack and the Possibility of Information Leakage (Second Report) |
| Subject Entity | CYND Co.,Ltd. |
| Target Locations / Products | BeautyMerit, a cloud-based appointment management system for hair and beauty salons |
| Cause | Unauthorized access caused by a cyberattack. The detailed cause is not disclosed. |
| Amount of Impact on Business Performance | Minor (impact on the consolidated results of the Company's group) |
| Accounting period in which recognized | Fiscal year ending March 2026 |
| Impact on Earnings Forecast | The impact of this matter on the consolidated results of the Company's group is currently considered minor. If any matter requiring disclosure arises, we will promptly announce it. |
| Investigation structure | Forensic investigation by an external security specialist |
| Measures to prevent recurrence | Reviewing and tightening communication routes; reviewing various security policies and authentication methods; strengthening the security monitoring framework; conducting comprehensive vulnerability assessments; and other measures |
| Outlook | We will notify the affected users in sequence in coordination with the hair and beauty salons. We will continue monitoring the possibility of information leakage outside the system. We will implement and strengthen initiatives to prevent recurrence and restore trust. |
| Planned follow-up disclosure | If any matter requiring disclosure arises, we will promptly announce it. |
Items this document does not state (14)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.Following a forensic investigation by an external security specialist, no evidence of information being taken outside the system or of a backdoor was found. However, we determined that it would be difficult to completely rule out the risk of leakage of information that may have been accessible to a third party.