Unauthorized Access to the Company's "@link" Service and Temporary Suspension of the Service
MEDLEY,INC. (filing company)
Medical institution operations support system "@link (アットリンク)," patient app "アットリンクアプリ," and related services. Up to 787 medical institutions may be affected
Unauthorized access by a third party. Specific details, including the intrusion route, are Not disclosed
Company response
The provision of "@link and related services" (including @link, アットリンクアプリ, and related services) was temporarily suspended from late on 14 October 2026
The company stated that it will provide an update based on the investigation results, but the specific expected service resumption date is Not disclosed
The investigation is being conducted in coordination and cooperation with an external specialist. The name of the specialist, the establishment of a third-party or special investigation committee, the committee chair's name, and the establishment date are Not disclosed
The company will implement any necessary additional measures and measures to prevent recurrence
Fiscal year ending December 2026 (the impact on consolidated results is described; the accounting recognition period is Not disclosed)
The impact on consolidated results for the fiscal year ending December 2026 is "expected to be minor." Revised figures are Not disclosed
Related procedures
Report to the Personal Information Protection Commission and consultation with the police
Personal Information Protection Commission and police
The company will continue the investigation in coordination with an external specialist and implement any necessary additional measures and measures to prevent recurrence based on the investigation results. The outlook for resuming the services will be announced separately based on the investigation results
The investigation results will be announced separately as soon as they become available. If any matter requiring disclosure arises, it will be announced promptly
| Item | Details |
|---|---|
| Event name | Unauthorized Access to the Company's "@link" Service and Temporary Suspension of the Service |
| Date of occurrence | 11 October 2026 (the date on which the company began its investigation after receiving information from an external specialist regarding the possibility of unauthorized access; the actual date of the unauthorized access is Not disclosed) |
| Date recognized / date notice received | 11 October 2026 (the date on which information was received from an external specialist) |
| Subject Entity | MEDLEY,INC. (filing company) |
| Target Locations / Products | Medical institution operations support system "@link (アットリンク)," patient app "アットリンクアプリ," and related services. Up to 787 medical institutions may be affected |
| Cause | Unauthorized access by a third party. Specific details, including the intrusion route, are Not disclosed |
| Accounting period in which recognized | Fiscal year ending December 2026 (the impact on consolidated results is described; the accounting recognition period is Not disclosed) |
| Impact on Earnings Forecast | The impact on consolidated results for the fiscal year ending December 2026 is "expected to be minor." Revised figures are Not disclosed |
| Type of litigation or proceeding | Report to the Personal Information Protection Commission and consultation with the police |
| Court or authority | Personal Information Protection Commission and police |
| Suspended operations | The provision of "@link and related services" (including @link, アットリンクアプリ, and related services) was temporarily suspended from late on 14 October 2026 |
| Scheduled resumption date | The company stated that it will provide an update based on the investigation results, but the specific expected service resumption date is Not disclosed |
| Investigation structure | The investigation is being conducted in coordination and cooperation with an external specialist. The name of the specialist, the establishment of a third-party or special investigation committee, the committee chair's name, and the establishment date are Not disclosed |
| Measures to prevent recurrence | The company will implement any necessary additional measures and measures to prevent recurrence |
| Outlook | The company will continue the investigation in coordination with an external specialist and implement any necessary additional measures and measures to prevent recurrence based on the investigation results. The outlook for resuming the services will be announced separately based on the investigation results |
| Planned follow-up disclosure | The investigation results will be announced separately as soon as they become available. If any matter requiring disclosure arises, it will be announced promptly |
Items this document does not state (9)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.The company stated that it temporarily suspended the services to prevent the damage from spreading and to conduct a further investigation after confirming unauthorized access by a third party.