Apology and Notice Regarding the Leakage of Prepaid Card Information Following Unauthorized Access by a Third Party
The system of 株式会社バリューデザイン and the MOS Card operated by MOS FOOD SERVICES,INC.
The management system for the MOS Card prepaid card
The system of 株式会社バリューデザイン was subject to unauthorized access by a third party, which carried out unauthorized access using an external program.
The impact of this matter on the Company's results is expected to be minor.
Company response
(1) Strengthening and tightening control systems at contractors and external partners: We will re-evaluate the security levels of servers and systems operated by contractors, strengthen management and oversight systems, and thoroughly implement security audits. (2) Strengthening authentication systems and access controls: We will thoroughly enforce strict access management, including stronger controls over unauthorized access via APIs, restrictions on simple and high-risk password settings, and restrictions on the IP addresses from which management accounts may connect. (3) Strengthening monitoring and early-warning detection systems: In cooperation with external specialist organizations, we will strengthen and enhance monitoring systems across all systems, including contractor environments, to enable early detection and immediate blocking of unauthorized access.
The PINs linked to the leaked MOS Card numbers will be forcibly changed, and the Company's security infrastructure and management systems, including those of contractors, will be strengthened. If any facts requiring disclosure become known, we will promptly announce them on the Company's website and through other channels.
| Item | Details |
|---|---|
| Event name | Apology and Notice Regarding the Leakage of Prepaid Card Information Following Unauthorized Access by a Third Party |
| Date of occurrence | From 14 to 18 October 2026 (when suspicious access and attempted unauthorized logins were detected) |
| Subject Entity | The system of 株式会社バリューデザイン and the MOS Card operated by MOS FOOD SERVICES,INC. |
| Target Locations / Products | The management system for the MOS Card prepaid card |
| Cause | The system of 株式会社バリューデザイン was subject to unauthorized access by a third party, which carried out unauthorized access using an external program. |
| Impact on Earnings Forecast | The impact of this matter on the Company's results is expected to be minor. |
| Measures to prevent recurrence | (1) Strengthening and tightening control systems at contractors and external partners: We will re-evaluate the security levels of servers and systems operated by contractors, strengthen management and oversight systems, and thoroughly implement security audits. (2) Strengthening authentication systems and access controls: We will thoroughly enforce strict access management, including stronger controls over unauthorized access via APIs, restrictions on simple and high-risk password settings, and restrictions on the IP addresses from which management accounts may connect. (3) Strengthening monitoring and early-warning detection systems: In cooperation with external specialist organizations, we will strengthen and enhance monitoring systems across all systems, including contractor environments, to enable early detection and immediate blocking of unauthorized access. |
| Outlook | The PINs linked to the leaked MOS Card numbers will be forcibly changed, and the Company's security infrastructure and management systems, including those of contractors, will be strengthened. If any facts requiring disclosure become known, we will promptly announce them on the Company's website and through other channels. |
| Planned follow-up disclosure | If any facts requiring disclosure become known, we will promptly announce them on the Company's website and through other channels. |
Items this document does not state (16)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.The system of 株式会社バリューデザイン, an external contractor, was subject to unauthorized access by a third party, resulting in the leakage of information through unauthorized access using an external program.