Report on the Findings of the Investigation into Unauthorized Access to the Company's HALMEK up Website (Final Report)
halmek holdings Co.,Ltd. and the company group
The HALMEK up website and its administration interface
The ID and PASSWORD of 1 employee were used without authorization. However, the circumstances leading to the unauthorized use are Not disclosed
No amount disclosed. The impact on consolidated results for the fiscal year ending March 2027 was deemed immaterial.
The impact on consolidated results for the fiscal year ending March 2027 was deemed immaterial. Details on any revision to the earnings forecast are Not disclosed
Related procedures
Report to the Personal Information Protection Commission
Personal Information Protection Commission
Company response
A forensic investigation by external experts. The investigation began on 9 September 2026, was completed on 11 October 2026, and the investigation report was received on the same day.
Strengthen security measures and monitoring systems for systems, networks and devices, among other measures.
The company will strengthen its security measures and monitoring systems while receiving advice from external experts. It will continue to report to the Personal Information Protection Commission and take other related actions.
If any matters requiring disclosure arise, the Company will promptly disclose them.
| Item | Details |
|---|---|
| Event name | Report on the Findings of the Investigation into Unauthorized Access to the Company's HALMEK up Website (Final Report) |
| Date of occurrence | 13 June, 7 August, 2 September, 3 September and 9 September 2026 (1 unauthorized access incident on each date) |
| Date recognized / date notice received | 9 September 2026 (evidence of unauthorized access confirmed) |
| Subject Entity | halmek holdings Co.,Ltd. and the company group |
| Target Locations / Products | The HALMEK up website and its administration interface |
| Cause | The ID and PASSWORD of 1 employee were used without authorization. However, the circumstances leading to the unauthorized use are Not disclosed |
| Amount of Impact on Business Performance | No amount disclosed. The impact on consolidated results for the fiscal year ending March 2027 was deemed immaterial. |
| Impact on Earnings Forecast | The impact on consolidated results for the fiscal year ending March 2027 was deemed immaterial. Details on any revision to the earnings forecast are Not disclosed |
| Type of litigation or proceeding | Report to the Personal Information Protection Commission |
| Court or authority | Personal Information Protection Commission |
| Investigation structure | A forensic investigation by external experts. The investigation began on 9 September 2026, was completed on 11 October 2026, and the investigation report was received on the same day. |
| Measures to prevent recurrence | Strengthen security measures and monitoring systems for systems, networks and devices, among other measures. |
| Outlook | The company will strengthen its security measures and monitoring systems while receiving advice from external experts. It will continue to report to the Personal Information Protection Commission and take other related actions. |
| Planned follow-up disclosure | If any matters requiring disclosure arise, the Company will promptly disclose them. |
Items this document does not state (11)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.The company identified the unauthorized use of the ID and PASSWORD of 1 employee. However, the disclosure does not provide further details on how the ID and PASSWORD came to be used without authorization.