Komori
Occurring Fact4923COTA CO.,LTD.Materials and Chemicals

Notice of System Disruption Caused by a Cyberattack (Update 4)

Some internal servers and PCs were infected with ransomware through unauthorized access by a third party, and data were encrypted. The company is working to restore and rebuild its systems and strengthen security, while production, order acceptance and shipment operations continue.

Worth reading
48Recurring
0–100. This measures how worthwhile something is to read, not how good or bad the company is.
Direction
Deterioration
Direction inferred from the company’s description.
Scale
—
Displayed only when the document provides numerical figures.
Wording
Avoiding a definitive answer
How definitive the wording is.

Notice of System Disruption Caused by a Cyberattack (Update 4)

Subject Entity

COTA CO.,LTD. (the filing company)

Target Locations / Products

Some internal servers and internal PC terminals, and production, order acceptance and shipment operations for the company's products

Occurrence27 March 2026
Same day
Awareness or receipt of notice27 March 2026 (the date on which the company confirmed malfunctions in some internal PC terminals and identified unauthorized access through an internal investigation)
This disclosure06/05/2026
Cause

Some servers and internal PC terminals were infected with ransomware through unauthorized access from outside the company, resulting in the encryption of data and other information

Amount of Impact on Business Performance

The company plans to record costs related to the response, but the amount is still under review. Accounting classification: Not disclosed

Accounting period in which recognized

Fiscal year ending March 2026

Impact on Earnings Forecast

There is currently no change to the earnings forecast for the fiscal year ending March 2026. The impact on financial performance is expected to be limited.

Company response

Investigation structure

An investigation conducted in cooperation with external experts, including a forensic investigation

Measures to prevent recurrence

Restoration of the systems, including the rebuilding and strengthening of the network and server environments, and further strengthening of the security framework

Outlook

The company will proceed with system restoration, including the rebuilding and strengthening of the network and server environments, as well as further strengthening of the security framework. If any matters requiring disclosure become clear, the company will disclose them promptly.

Event that occurred
ItemDetails
Event nameNotice of System Disruption Caused by a Cyberattack (Update 4)
Date of occurrence27 March 2026
Date recognized / date notice received27 March 2026 (the date on which the company confirmed malfunctions in some internal PC terminals and identified unauthorized access through an internal investigation)
Subject EntityCOTA CO.,LTD. (the filing company)
Target Locations / ProductsSome internal servers and internal PC terminals, and production, order acceptance and shipment operations for the company's products
CauseSome servers and internal PC terminals were infected with ransomware through unauthorized access from outside the company, resulting in the encryption of data and other information
Amount of Impact on Business PerformanceThe company plans to record costs related to the response, but the amount is still under review. Accounting classification: Not disclosed
Accounting period in which recognizedFiscal year ending March 2026
Impact on Earnings ForecastThere is currently no change to the earnings forecast for the fiscal year ending March 2026. The impact on financial performance is expected to be limited.
Investigation structureAn investigation conducted in cooperation with external experts, including a forensic investigation
Measures to prevent recurrenceRestoration of the systems, including the rebuilding and strengthening of the network and server environments, and further strengthening of the security framework
OutlookThe company will proceed with system restoration, including the rebuilding and strengthening of the network and server environments, as well as further strengthening of the security framework. If any matters requiring disclosure become clear, the company will disclose them promptly.
Planned follow-up disclosureIf any matters requiring disclosure become clear, the company will disclose them promptly.
Items this document does not state (12)
Type of litigation or proceedingCourt or authorityPlaintiffDefendantDate of filing / date of actionClaim amount / surcharge amountAmount of receivables at risk of non-collection or delayed collectionSuspended operationsScheduled resumption dateDirectors' and officers' liabilityVoting rights ownership percentage before the changeVoting rights ownership percentage after the change

These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.

The reasons the company gives

The company's own explanation, not something inferred from the numbers.

Some servers and internal PC terminals were infected with ransomware through unauthorized access from outside the company, resulting in the encryption of data and other information.

How to read this page

This is not the documentKomori reads the disclosure the company filed and writes this summary. Figures are as stated by the company and are not audited.
Weight is not a verdictIt measures how much this changes what the company had already told the market. It is not a view on the shares.
Corrections happenIf the company reissues this disclosure, the page is rebuilt from the corrected version and the revision number moves up.
Notice of System Disruption Caused by a Cyberattack (Update 4) | COTA CO.,LTD. (4923) timely disclosure | Komori