Update on Unauthorized Access to the IT Systems of a Philippine Subsidiary
Coral Bay Nickel Corporation (CBNC) and 3 of the Company's subsidiaries in the Republic of the Philippines
Certain CBNC servers, the CBNC production plant, and the communications networks of 3 of the Company's subsidiaries in the Republic of the Philippines
Damage from a ransomware infection resulting from unauthorized access by a third party
There is no impact on results for the fiscal year ending March 2026, and the impact on results for the fiscal year ending March 2027 is considered minor.
Fiscal year ending March 2026 (no impact), fiscal year ending March 2027 (the impact is considered minor)
There is no impact on results for the fiscal year ending March 2026, and the impact on results for the fiscal year ending March 2027 is considered minor.
Company response
The communications networks of 3 of the Company's subsidiaries in the Republic of the Philippines, including CBNC, had been isolated but have now been restored.
The Company has strengthened measures against unauthorized access across the Group, including CBNC.
The Company identified the entry route, investigated the scope of the impact, and restored the systems and data, while also strengthening measures against unauthorized access across the Group, including CBNC. The financial results announcement is scheduled to be disclosed as planned on 11 May 2026.
| Item | Details |
|---|---|
| Event name | Update on Unauthorized Access to the IT Systems of a Philippine Subsidiary |
| Date of occurrence | 2 April 2026 (the date on which the encryption of 2 CBNC servers was detected) |
| Date recognized / date notice received | 2 April 2026 (the date on which the encryption of 2 CBNC servers was detected) |
| Subject Entity | Coral Bay Nickel Corporation (CBNC) and 3 of the Company's subsidiaries in the Republic of the Philippines |
| Target Locations / Products | Certain CBNC servers, the CBNC production plant, and the communications networks of 3 of the Company's subsidiaries in the Republic of the Philippines |
| Cause | Damage from a ransomware infection resulting from unauthorized access by a third party |
| Amount of Impact on Business Performance | There is no impact on results for the fiscal year ending March 2026, and the impact on results for the fiscal year ending March 2027 is considered minor. |
| Accounting period in which recognized | Fiscal year ending March 2026 (no impact), fiscal year ending March 2027 (the impact is considered minor) |
| Impact on Earnings Forecast | There is no impact on results for the fiscal year ending March 2026, and the impact on results for the fiscal year ending March 2027 is considered minor. |
| Suspended operations | The communications networks of 3 of the Company's subsidiaries in the Republic of the Philippines, including CBNC, had been isolated but have now been restored. |
| Measures to prevent recurrence | The Company has strengthened measures against unauthorized access across the Group, including CBNC. |
| Outlook | The Company identified the entry route, investigated the scope of the impact, and restored the systems and data, while also strengthening measures against unauthorized access across the Group, including CBNC. The financial results announcement is scheduled to be disclosed as planned on 11 May 2026. |
Items this document does not state (13)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.Two CBNC servers were encrypted after being infected with ransomware through unauthorized access by a third party. The Company isolated the affected servers, investigated the entry route and scope of the impact, and restored the systems and data.