Notice Regarding System Disruption Caused by Unauthorized Access by a Third Party [Final Report]
The filing company and its overseas consolidated subsidiaries (FUKUVI VIETNAM/THAILAND)
Overseas consolidated subsidiary websites (FUKUVI VIETNAM/THAILAND), the English-language building materials product site, and the English-language website for the outdoor furniture brand “Fandaline (ファンダライン).” The affected URLs are fvc.fukuvi-jp.com, ftc.fukuvi-jp.com, fukuvikenzai.com, and fandaline.fukuvi-jp.com.
A third party gained access to an external service provider's rental server and installed malware for remotely operating the server.
Company response
Publication of all affected sites was suspended. The affected sites are some English-language sites for overseas markets, the English-language building materials product site, and the English-language Fandaline site.
The sites will be republished in stages once the conditions for safe recovery and republication are in place. The timing of republication has not been determined at this time.
An investigation was conducted with the assistance of an external specialist organisation. The establishment of a third-party committee or special investigation committee is Not disclosed.
Strengthening security measures and monitoring systems for systems and networks
Related procedures
Report to the Personal Information Protection Commission
Personal Information Protection Commission
Security measures and monitoring systems for systems and networks will be strengthened with advice from external specialist organisations. The affected sites will be republished in stages once the conditions for safe recovery and republication are in place.
The company will announce the republication on its corporate website once preparations are complete. The timing of republication has not been determined.
| Item | Details |
|---|---|
| Event name | Notice Regarding System Disruption Caused by Unauthorized Access by a Third Party [Final Report] |
| Date of occurrence | 2 September 2026 (initial intrusion date). The unauthorized access and installation of malware were discovered on 16 September 2026, and all sites were suspended that day. |
| Date recognized / date notice received | 16 September 2026. The date on which it was discovered that unauthorized access had occurred and malware had been installed. |
| Subject Entity | The filing company and its overseas consolidated subsidiaries (FUKUVI VIETNAM/THAILAND) |
| Target Locations / Products | Overseas consolidated subsidiary websites (FUKUVI VIETNAM/THAILAND), the English-language building materials product site, and the English-language website for the outdoor furniture brand “Fandaline (ファンダライン).” The affected URLs are fvc.fukuvi-jp.com, ftc.fukuvi-jp.com, fukuvikenzai.com, and fandaline.fukuvi-jp.com. |
| Cause | A third party gained access to an external service provider's rental server and installed malware for remotely operating the server. |
| Type of litigation or proceeding | Report to the Personal Information Protection Commission |
| Court or authority | Personal Information Protection Commission |
| Suspended operations | Publication of all affected sites was suspended. The affected sites are some English-language sites for overseas markets, the English-language building materials product site, and the English-language Fandaline site. |
| Scheduled resumption date | The sites will be republished in stages once the conditions for safe recovery and republication are in place. The timing of republication has not been determined at this time. |
| Investigation structure | An investigation was conducted with the assistance of an external specialist organisation. The establishment of a third-party committee or special investigation committee is Not disclosed. |
| Measures to prevent recurrence | Strengthening security measures and monitoring systems for systems and networks |
| Outlook | Security measures and monitoring systems for systems and networks will be strengthened with advice from external specialist organisations. The affected sites will be republished in stages once the conditions for safe recovery and republication are in place. |
| Planned follow-up disclosure | The company will announce the republication on its corporate website once preparations are complete. The timing of republication has not been determined. |
Items this document does not state (11)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.A third party gained access to an external service provider's rental server on 2 September and installed malware capable of remotely operating the server.