Unauthorized access at a consolidated subsidiary and leakage of personal information
ACCESS AP TAIWAN. Co. Ltd. (AP Taiwan)
Business support service CROS and a BI tool provided exclusively to one specific company among CROS users. The affected regions are Taiwan, Hong Kong, Macao and Singapore.
Unauthorized access and an attack by a third party. The access originated from a BI tool provided exclusively to one specific company, and the company has determined that the unauthorized access occurred at the application level of the BI tool.
Company response
Emergency shutdown and isolation of the server targeted by the unauthorized access, and temporary suspension of the entire CROS service to prevent secondary damage. The CROS service has now been restored.
Specific date: Not disclosed. The CROS service has now been restored.
Investigation and log analysis by AP Taiwan. Third-party committee, special investigation committee or similar body: Not disclosed.
・Restart the BI tool targeted by the unauthorized access after strengthening its security ・Modify the main CROS program so that it does not retain credit card information for incomplete payments (such information has not been retained since before once payment is completed) ・Support the implementation and verification of enhanced security measures by security and server specialists at headquarters (the company)
Financial impact: Not disclosed. The impact on consolidated results is expected to be immaterial, but is still under review.
The impact on consolidated results is expected to be immaterial, but is still under review. The company will promptly disclose any matters requiring disclosure if they arise.
Related procedures
Report to the Personal Information Protection Commission and report to the Taiwanese authorities
Personal Information Protection Commission and Taiwanese authorities (specific names are Not disclosed)
Some work, including updating the secret keys for the payment service, will continue. AP Taiwan will report to the Taiwanese authorities and provide information and technical support to business partners.
The Company will promptly disclose any material matters that arise in the future.
| Item | Details |
|---|---|
| Event name | Unauthorized access at a consolidated subsidiary and leakage of personal information |
| Date of occurrence | 11 September 2026 (the date on which signs of unauthorized access were detected; the actual date of the unauthorized access and leakage is Not disclosed) |
| Date recognized / date notice received | 11 September 2026 (the date on which signs of unauthorized access were detected) |
| Subject Entity | ACCESS AP TAIWAN. Co. Ltd. (AP Taiwan) |
| Target Locations / Products | Business support service CROS and a BI tool provided exclusively to one specific company among CROS users. The affected regions are Taiwan, Hong Kong, Macao and Singapore. |
| Cause | Unauthorized access and an attack by a third party. The access originated from a BI tool provided exclusively to one specific company, and the company has determined that the unauthorized access occurred at the application level of the BI tool. |
| Amount of Impact on Business Performance | Financial impact: Not disclosed. The impact on consolidated results is expected to be immaterial, but is still under review. |
| Impact on Earnings Forecast | The impact on consolidated results is expected to be immaterial, but is still under review. The company will promptly disclose any matters requiring disclosure if they arise. |
| Type of litigation or proceeding | Report to the Personal Information Protection Commission and report to the Taiwanese authorities |
| Court or authority | Personal Information Protection Commission and Taiwanese authorities (specific names are Not disclosed) |
| Suspended operations | Emergency shutdown and isolation of the server targeted by the unauthorized access, and temporary suspension of the entire CROS service to prevent secondary damage. The CROS service has now been restored. |
| Scheduled resumption date | Specific date: Not disclosed. The CROS service has now been restored. |
| Investigation structure | Investigation and log analysis by AP Taiwan. Third-party committee, special investigation committee or similar body: Not disclosed. |
| Measures to prevent recurrence | ・Restart the BI tool targeted by the unauthorized access after strengthening its security ・Modify the main CROS program so that it does not retain credit card information for incomplete payments (such information has not been retained since before once payment is completed) ・Support the implementation and verification of enhanced security measures by security and server specialists at headquarters (the company) |
| Outlook | Some work, including updating the secret keys for the payment service, will continue. AP Taiwan will report to the Taiwanese authorities and provide information and technical support to business partners. |
| Planned follow-up disclosure | The Company will promptly disclose any material matters that arise in the future. |
Items this document does not state (9)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.The cause was unauthorized access and an attack by a third party. The access originated from a BI tool provided exclusively to one specific company. The company has determined that the unauthorized access occurred at the application level of the BI tool.