System disruption caused by a cyberattack
COTA CO.,LTD. (the Company)
All internal systems, networks and server environments
Cyberattack. The detailed cause of the incident is subject to forensic investigation and analysis.
Company response
The internal systems were shut down due to the system outage; the extent of the disruption to shipping, production, sales and other operations has not been disclosed.
Recovery completed. As of 20 August 2026, all internal systems were operating normally.
A forensic investigation and other measures were conducted by external experts.
① In cooperation with external experts, we are conducting a detailed forensic investigation and analysis of the intrusion route, scope of the damage and cause of the incident, and are promptly taking corrective action against any identified vulnerabilities. ② We are conducting a comprehensive review based on various attack methods, identifying potential risks and prioritizing countermeasures to reduce the risk of recurrence. ③ We are further strengthening the monitoring framework for networks and systems and establishing a framework that enables the early detection of suspicious behavior and rapid incident response through the introduction of security solutions and other measures.
We will steadily implement measures to prevent recurrence and continuously review and improve them in light of environmental changes and emerging threat trends.
| Item | Details |
|---|---|
| Event name | System disruption caused by a cyberattack |
| Date of occurrence | 30 March 2026 |
| Subject Entity | COTA CO.,LTD. (the Company) |
| Target Locations / Products | All internal systems, networks and server environments |
| Cause | Cyberattack. The detailed cause of the incident is subject to forensic investigation and analysis. |
| Suspended operations | The internal systems were shut down due to the system outage; the extent of the disruption to shipping, production, sales and other operations has not been disclosed. |
| Scheduled resumption date | Recovery completed. As of 20 August 2026, all internal systems were operating normally. |
| Investigation structure | A forensic investigation and other measures were conducted by external experts. |
| Measures to prevent recurrence | ① In cooperation with external experts, we are conducting a detailed forensic investigation and analysis of the intrusion route, scope of the damage and cause of the incident, and are promptly taking corrective action against any identified vulnerabilities. ② We are conducting a comprehensive review based on various attack methods, identifying potential risks and prioritizing countermeasures to reduce the risk of recurrence. ③ We are further strengthening the monitoring framework for networks and systems and establishing a framework that enables the early detection of suspicious behavior and rapid incident response through the introduction of security solutions and other measures. |
| Outlook | We will steadily implement measures to prevent recurrence and continuously review and improve them in light of environmental changes and emerging threat trends. |
Items this document does not state (15)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.The rebuilding and strengthening of the network and server environments have been completed. In addition, measures to prevent recurrence were formulated based on the results of a forensic investigation by external experts.