Komori
Occurring Fact5713Sumitomo Metal Mining Co.,Ltd.Iron and steel and non-ferrous metals

Notice Regarding Unauthorized Access to the IT Systems of a Philippine Subsidiary

At CBNC, a Philippine nickel smelting subsidiary, 2 servers were infected with ransomware as a result of unauthorized access by a third party. Communications have been disconnected, and the company is investigating the incident and working on recovery, while production activities continue.

Worth reading
45Recurring
0–100. This measures how worthwhile something is to read, not how good or bad the company is.
Direction
Deterioration
Direction inferred from the company’s description.
Scale
—
Displayed only when the document provides numerical figures.
Wording
Avoiding a definitive answer
How definitive the wording is.

Damage from a ransomware infection resulting from unauthorized access by a third party

Subject Entity

Coral Bay Nickel Corporation (CBNC). Sumitomo Metal Mining Philippine Holdings Corporation and Taganito HPAL Nickel Corporation are also mentioned as entities affected by the communications disruption.

Target Locations / Products

Certain CBNC servers (2 servers) and the communications network shared by CBNC and other entities

OccurrenceApril 2 (Thursday) (the date on which the company detected the encryption of 2 CBNC servers; the date of the attack itself is not stated)
Awareness or receipt of noticeApril 2 (Thursday) (the date on which the company detected that 2 CBNC servers had been encrypted)
This disclosure04/08/2026
Cause

Assumed to have been caused by damage from a ransomware infection resulting from unauthorized access by a third party

Accounting period in which recognized

Fiscal year ending March 2026

Impact on Earnings Forecast

The impact on results for the fiscal year ending March 2026 is currently considered to be minor, but the company is still assessing the matter, including any impact on the financial results announcement.

Company response

Suspended operations

Communications were disconnected at CBNC and at Sumitomo Metal Mining Philippine Holdings Corporation and Taganito HPAL Nickel Corporation, which share part of their communications network with CBNC.

Investigation structure

The company is investigating the scope of the impact and working on recovery with support from external experts. No committee name, chairperson or establishment date is stated.

Outlook

The company will investigate the scope of the impact and work on recovery with support from external experts. Any new information that comes to light will be disclosed promptly.

Event that occurred
ItemDetails
Event nameDamage from a ransomware infection resulting from unauthorized access by a third party
Date of occurrenceApril 2 (Thursday) (the date on which the company detected the encryption of 2 CBNC servers; the date of the attack itself is not stated)
Date recognized / date notice receivedApril 2 (Thursday) (the date on which the company detected that 2 CBNC servers had been encrypted)
Subject EntityCoral Bay Nickel Corporation (CBNC). Sumitomo Metal Mining Philippine Holdings Corporation and Taganito HPAL Nickel Corporation are also mentioned as entities affected by the communications disruption.
Target Locations / ProductsCertain CBNC servers (2 servers) and the communications network shared by CBNC and other entities
CauseAssumed to have been caused by damage from a ransomware infection resulting from unauthorized access by a third party
Accounting period in which recognizedFiscal year ending March 2026
Impact on Earnings ForecastThe impact on results for the fiscal year ending March 2026 is currently considered to be minor, but the company is still assessing the matter, including any impact on the financial results announcement.
Suspended operationsCommunications were disconnected at CBNC and at Sumitomo Metal Mining Philippine Holdings Corporation and Taganito HPAL Nickel Corporation, which share part of their communications network with CBNC.
Investigation structureThe company is investigating the scope of the impact and working on recovery with support from external experts. No committee name, chairperson or establishment date is stated.
OutlookThe company will investigate the scope of the impact and work on recovery with support from external experts. Any new information that comes to light will be disclosed promptly.
Planned follow-up disclosureAny new information that comes to light will be disclosed promptly.
Items this document does not state (13)
Amount of Impact on Business PerformanceType of litigation or proceedingCourt or authorityPlaintiffDefendantDate of filing / date of actionClaim amount / surcharge amountAmount of receivables at risk of non-collection or delayed collectionScheduled resumption dateMeasures to prevent recurrenceDirectors' and officers' liabilityVoting rights ownership percentage before the changeVoting rights ownership percentage after the change

These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.

The reasons the company gives

The company's own explanation, not something inferred from the numbers.

The incident was assumed to have been caused by damage from a ransomware infection resulting from unauthorized access by a third party.

How to read this page

This is not the documentKomori reads the disclosure the company filed and writes this summary. Figures are as stated by the company and are not audited.
Weight is not a verdictIt measures how much this changes what the company had already told the market. It is not a view on the shares.
Corrections happenIf the company reissues this disclosure, the page is rebuilt from the corrected version and the revision number moves up.
Notice Regarding Unauthorized Access to the IT Systems of a Philippine Subsidiary | Sumitomo Metal Mining Co.,Ltd. (5713) timely disclosure | Komori