Potential Leakage of Email Addresses Due to Unauthorized Access to an Email Distribution Service
アララ株式会社 (email distribution service operator) and WORKMAN CO.,LTD.
The “Arara Message” email distribution service and its server and database
Unauthorized access by a third party (access to the database via the server using improperly obtained authentication credentials)
Company response
Distribution of newsletters and other communications using “Arara Message.” アララ株式会社 has suspended the entire service, and we have also suspended distribution since receiving notice on 28 October.
An objective assessment and verification of アララ株式会社’s security measures and monitoring systems under the advice and guidance of external security specialists
We will conduct an objective assessment and verification of the service operator’s security measures and monitoring systems and take all possible measures to prevent recurrence by thoroughly managing outsourced service providers and further strengthening our information security framework.
Related procedures
Reporting procedures for the Personal Information Protection Commission
Personal Information Protection Commission
We expect the impact of this matter on our business results to be minor. If it becomes clear that the matter will have a material impact on our business results or if any other matter requiring disclosure arises, we will promptly provide notice.
We will assess and verify the security measures and monitoring systems of outsourced service providers under the advice and guidance of external security specialists, and strengthen our management of outsourced service providers and information security framework. We will promptly provide notice if a material impact on our business results or any other matter requiring disclosure becomes apparent.
If it becomes clear that the matter will have a material impact on our business results or if any other matter requiring disclosure arises, we will promptly provide notice.
| Item | Details |
|---|---|
| Event name | Potential Leakage of Email Addresses Due to Unauthorized Access to an Email Distribution Service |
| Date of occurrence | From 28 to 31 October 2026 |
| Date recognized / date notice received | 28 October 2026 (the date on which we were contacted) |
| Subject Entity | アララ株式会社 (email distribution service operator) and WORKMAN CO.,LTD. |
| Target Locations / Products | The “Arara Message” email distribution service and its server and database |
| Cause | Unauthorized access by a third party (access to the database via the server using improperly obtained authentication credentials) |
| Impact on Earnings Forecast | We expect the impact of this matter on our business results to be minor. If it becomes clear that the matter will have a material impact on our business results or if any other matter requiring disclosure arises, we will promptly provide notice. |
| Type of litigation or proceeding | Reporting procedures for the Personal Information Protection Commission |
| Court or authority | Personal Information Protection Commission |
| Suspended operations | Distribution of newsletters and other communications using “Arara Message.” アララ株式会社 has suspended the entire service, and we have also suspended distribution since receiving notice on 28 October. |
| Investigation structure | An objective assessment and verification of アララ株式会社’s security measures and monitoring systems under the advice and guidance of external security specialists |
| Measures to prevent recurrence | We will conduct an objective assessment and verification of the service operator’s security measures and monitoring systems and take all possible measures to prevent recurrence by thoroughly managing outsourced service providers and further strengthening our information security framework. |
| Outlook | We will assess and verify the security measures and monitoring systems of outsourced service providers under the advice and guidance of external security specialists, and strengthen our management of outsourced service providers and information security framework. We will promptly provide notice if a material impact on our business results or any other matter requiring disclosure becomes apparent. |
| Planned follow-up disclosure | If it becomes clear that the matter will have a material impact on our business results or if any other matter requiring disclosure arises, we will promptly provide notice. |
Items this document does not state (11)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.This was due to unauthorized access by a third party to the email distribution service “Arara Message,” including access to the database via the service’s server and the removal of email addresses.