Potential leakage of personal information following unauthorised access to the SOFT99 official online shop
SOFT99corporation (the Company)
SOFT99 official online shop and enquiry form
An external third party uploaded a program file through the image-attachment function of the enquiry form. Using that file as a foothold, a file was placed that enabled commands to be sent from outside, allowing investigations within the server and the reading of configuration files with the site's program privileges.
Company response
Temporary suspension of the Company's official online shop and blocking of access routes
An investigation was conducted by the service provider and cooperating parties. The Company will subsequently commission an investigation by external security experts and others.
The Company will implement the necessary measures to prevent recurrence.
Current period
Under detailed investigation. If any matters requiring disclosure are identified, they will be announced promptly.
Related procedures
Report to the Personal Information Protection Commission
Personal Information Protection Commission
The Company will continue investigating the details of the cause and scope of the impact and implement the necessary measures to prevent recurrence based on the findings and advice of external security experts and others.
If any matters requiring disclosure are identified, they will be announced promptly.
| Item | Details |
|---|---|
| Event name | Potential leakage of personal information following unauthorised access to the SOFT99 official online shop |
| Date recognized / date notice received | 5 November 2026 (notification of suspicious activity received from the service provider) |
| Subject Entity | SOFT99corporation (the Company) |
| Target Locations / Products | SOFT99 official online shop and enquiry form |
| Cause | An external third party uploaded a program file through the image-attachment function of the enquiry form. Using that file as a foothold, a file was placed that enabled commands to be sent from outside, allowing investigations within the server and the reading of configuration files with the site's program privileges. |
| Accounting period in which recognized | Current period |
| Impact on Earnings Forecast | Under detailed investigation. If any matters requiring disclosure are identified, they will be announced promptly. |
| Type of litigation or proceeding | Report to the Personal Information Protection Commission |
| Court or authority | Personal Information Protection Commission |
| Suspended operations | Temporary suspension of the Company's official online shop and blocking of access routes |
| Investigation structure | An investigation was conducted by the service provider and cooperating parties. The Company will subsequently commission an investigation by external security experts and others. |
| Measures to prevent recurrence | The Company will implement the necessary measures to prevent recurrence. |
| Outlook | The Company will continue investigating the details of the cause and scope of the impact and implement the necessary measures to prevent recurrence based on the findings and advice of external security experts and others. |
| Planned follow-up disclosure | If any matters requiring disclosure are identified, they will be announced promptly. |
Items this document does not state (11)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.An external third party uploaded a program file through the image-attachment function of the enquiry form, creating a foothold that enabled commands to be sent to the server from outside, which led to investigations within the server and the reading of configuration files.