Unauthorized access to our systems
YMIRLINK,Inc. (the filing company)
Some server systems for the email delivery services operated by the company, and a total of 5 systems managed by the company
I. Vulnerabilities in programs; II. the acquisition of authentication credentials for the services used by the company's support and quality control personnel; III. the installation of unauthorized programs and output of data from databases; and IV. attempts to authenticate to other systems using the authentication credentials of the company's support and quality control personnel
Fiscal year ending December 2026
The impact of this matter on results for the fiscal year ending December 2026 is currently under review. The company will promptly disclose any matters requiring disclosure that arise in the future.
Related procedures
Report filed with investigative authorities
Investigative authorities (name not stated)
Company response
A detailed investigation is being conducted with the assistance of external experts.
I. Remediation of programs with vulnerabilities; II. and IV. deletion of the authentication credentials of the company's support and quality control personnel; and III. establishment of a system to detect unauthorized programs
A detailed investigation is being conducted with the assistance of external experts. The impact of this matter on results for the fiscal year ending December 2026 is currently under review, and the company will promptly disclose any matters requiring disclosure that arise.
The company will issue another report when new facts become known. It will promptly disclose any matters requiring disclosure that arise.
| Item | Details |
|---|---|
| Event name | Unauthorized access to our systems |
| Date of occurrence | Early morning of 16 October 2026 (the date on which the company's personnel confirmed that unauthorized access had occurred; the actual date of occurrence is not stated) |
| Date recognized / date notice received | Early morning of 16 October 2026 |
| Subject Entity | YMIRLINK,Inc. (the filing company) |
| Target Locations / Products | Some server systems for the email delivery services operated by the company, and a total of 5 systems managed by the company |
| Cause | I. Vulnerabilities in programs; II. the acquisition of authentication credentials for the services used by the company's support and quality control personnel; III. the installation of unauthorized programs and output of data from databases; and IV. attempts to authenticate to other systems using the authentication credentials of the company's support and quality control personnel |
| Accounting period in which recognized | Fiscal year ending December 2026 |
| Impact on Earnings Forecast | The impact of this matter on results for the fiscal year ending December 2026 is currently under review. The company will promptly disclose any matters requiring disclosure that arise in the future. |
| Type of litigation or proceeding | Report filed with investigative authorities |
| Court or authority | Investigative authorities (name not stated) |
| Investigation structure | A detailed investigation is being conducted with the assistance of external experts. |
| Measures to prevent recurrence | I. Remediation of programs with vulnerabilities; II. and IV. deletion of the authentication credentials of the company's support and quality control personnel; and III. establishment of a system to detect unauthorized programs |
| Outlook | A detailed investigation is being conducted with the assistance of external experts. The impact of this matter on results for the fiscal year ending December 2026 is currently under review, and the company will promptly disclose any matters requiring disclosure that arise. |
| Planned follow-up disclosure | The company will issue another report when new facts become known. It will promptly disclose any matters requiring disclosure that arise. |
Items this document does not state (11)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.The company explained that vulnerabilities in its programs were exploited, authentication credentials of personnel responsible for support and quality control were obtained, and this led to the installation of unauthorized programs and the output of data from databases.