Report on Unauthorized Access to Our Systems (Second Report)
YMIRLINK,Inc.
Cuenote FC, Cuenote BASE and other company systems. An additional 45 systems (44 Cuenote FC systems and 1 Cuenote BASE system)
Authentication credentials were obtained by exploiting program vulnerabilities, malicious programs were installed, and unauthorized logins to other systems and data extraction were carried out.
Company response
The server on which unauthorized access was confirmed, Cuenote BASE, multiple systems and all systems at a specific data center were shut down. Other systems shut down as a preventive measure will be restarted sequentially.
Other systems that had been shut down as a preventive measure will be restarted sequentially from 1:00 a.m. on 20 October 2026.
The investigation is being conducted with the assistance of an external security consulting firm and external experts. A task force to address the unauthorized access was established on 16 October 2026.
Remediation of vulnerable programs, deletion of the authentication credentials of company support and quality control personnel, establishment of a system for detecting malicious programs, and restrictions on the source IP addresses permitted to connect to authentication screens and APIs
No amount has been disclosed. The leaked information comprises 51,628,280 records on Cuenote FC (total count) and 190 records on Cuenote BASE.
Fiscal year ending December 2026
The impact on performance for the fiscal year ending December 2026 is currently under review.
Related procedures
Reports to investigative authorities concerning cybercrime and an administrative report concerning the leakage of personal information
Metropolitan Police Department, Personal Information Protection Commission, Japan Institute for Promotion of Digital Economy and Community (JIPDEC), and Information-technology Promotion Agency, Japan (IPA)
The company will proceed with a detailed investigation with the assistance of external experts and work to further strengthen its information security framework. IPA will be notified once the full extent of the incident has been determined and its cause identified.
A prompt report will be issued when new facts become known or matters requiring disclosure arise.
| Item | Details |
|---|---|
| Event name | Report on Unauthorized Access to Our Systems (Second Report) |
| Date of occurrence | 16 October 2026 (the date on which a company representative confirmed the unauthorized access) |
| Date recognized / date notice received | 16 October 2026 (the date on which a company representative confirmed that unauthorized access had occurred in some systems) |
| Subject Entity | YMIRLINK,Inc. |
| Target Locations / Products | Cuenote FC, Cuenote BASE and other company systems. An additional 45 systems (44 Cuenote FC systems and 1 Cuenote BASE system) |
| Cause | Authentication credentials were obtained by exploiting program vulnerabilities, malicious programs were installed, and unauthorized logins to other systems and data extraction were carried out. |
| Amount of Impact on Business Performance | No amount has been disclosed. The leaked information comprises 51,628,280 records on Cuenote FC (total count) and 190 records on Cuenote BASE. |
| Accounting period in which recognized | Fiscal year ending December 2026 |
| Impact on Earnings Forecast | The impact on performance for the fiscal year ending December 2026 is currently under review. |
| Type of litigation or proceeding | Reports to investigative authorities concerning cybercrime and an administrative report concerning the leakage of personal information |
| Court or authority | Metropolitan Police Department, Personal Information Protection Commission, Japan Institute for Promotion of Digital Economy and Community (JIPDEC), and Information-technology Promotion Agency, Japan (IPA) |
| Suspended operations | The server on which unauthorized access was confirmed, Cuenote BASE, multiple systems and all systems at a specific data center were shut down. Other systems shut down as a preventive measure will be restarted sequentially. |
| Scheduled resumption date | Other systems that had been shut down as a preventive measure will be restarted sequentially from 1:00 a.m. on 20 October 2026. |
| Investigation structure | The investigation is being conducted with the assistance of an external security consulting firm and external experts. A task force to address the unauthorized access was established on 16 October 2026. |
| Measures to prevent recurrence | Remediation of vulnerable programs, deletion of the authentication credentials of company support and quality control personnel, establishment of a system for detecting malicious programs, and restrictions on the source IP addresses permitted to connect to authentication screens and APIs |
| Outlook | The company will proceed with a detailed investigation with the assistance of external experts and work to further strengthen its information security framework. IPA will be notified once the full extent of the incident has been determined and its cause identified. |
| Planned follow-up disclosure | A prompt report will be issued when new facts become known or matters requiring disclosure arise. |
Items this document does not state (8)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.The vulnerability in a library was exploited, resulting in the installation of malicious programs, acquisition of authentication credentials, unauthorized logins and data extraction.