Komori
Occurring Fact8230HASEGAWA CO.,LTD.Retail

Notice concerning the leakage of personal information caused by unauthorized access to the email delivery service used by the Company (Second Report)

The period covered by the breach, the nature of the leaked information, the affected email addresses and the number of affected cases involving the outsourced email delivery service have been confirmed. The affected data consists of 305 email addresses. Delivery through the affected server has been suspended, and migration to a separate platform is under way.

Worth reading
46Recurring
0–100. This measures how worthwhile something is to read, not how good or bad the company is.
Direction
Deterioration
Direction inferred from the company’s description.
Scale
305
cases (affected email addresses)
Wording
Conditional
How definitive the wording is.

Leakage of personal information due to unauthorized access to our contractor’s email distribution service

Subject Entity

HASEGAWA CO.,LTD., アララ株式会社

Target Locations / Products

The server for アララ株式会社's repica email delivery system and emails sent by the Company

Occurrence2 November 2026 (the date on which the Company received a report of the personal information breach from アララ株式会社)
Same day
Awareness or receipt of notice2 November 2026
This disclosure11/05/2026
Cause

Unauthorized access by a third party to the repica server

Amount of Impact on Business Performance

No impact on business performance. Amount: Not disclosed

Accounting period in which recognized

The event occurred after the end of the consolidated accounting period for the second quarter of the fiscal year ending March 2027 and had no impact on performance for that period.

Impact on Earnings Forecast

The event has not been incorporated into the full-year consolidated earnings forecast for the fiscal year ending March 2027. If a revision to the earnings forecast or any other matter requiring disclosure arises, it will be reported promptly.

Company response

Suspended operations

Fully suspended email delivery through the email delivery server on which unauthorized access was confirmed

Scheduled resumption date

The planned resumption date is Not disclosed. Migration to a separate email delivery platform with adequate security measures is under way.

Measures to prevent recurrence

Email delivery through the affected email delivery server has already been fully suspended / Migration to a separate email delivery platform with adequate security measures will be pursued / Monitoring and reassessment of the information security framework, including that of service providers, will be strengthened / The report to the Personal Information Protection Commission will be submitted appropriately in coordination with アララ株式会社

Related procedures

Type

Report to the Personal Information Protection Commission

Court or authority

Personal Information Protection Commission

Outlook

Migration to a separate email delivery platform, strengthened monitoring and reassessment of the information security framework, including that of service providers, and submission of a report to the Personal Information Protection Commission will be pursued. Individual notifications were sent to the 305 affected recipients on 5 November 2026.

Planned follow-up disclosure

If a revision to the earnings forecast or any other matter requiring disclosure arises, it will be reported promptly.

Event that occurred
ItemDetails
Event nameLeakage of personal information due to unauthorized access to our contractor’s email distribution service
Date of occurrence2 November 2026 (the date on which the Company received a report of the personal information breach from アララ株式会社)
Date recognized / date notice received2 November 2026
Subject EntityHASEGAWA CO.,LTD., アララ株式会社
Target Locations / ProductsThe server for アララ株式会社's repica email delivery system and emails sent by the Company
CauseUnauthorized access by a third party to the repica server
Amount of Impact on Business PerformanceNo impact on business performance. Amount: Not disclosed
Accounting period in which recognizedThe event occurred after the end of the consolidated accounting period for the second quarter of the fiscal year ending March 2027 and had no impact on performance for that period.
Impact on Earnings ForecastThe event has not been incorporated into the full-year consolidated earnings forecast for the fiscal year ending March 2027. If a revision to the earnings forecast or any other matter requiring disclosure arises, it will be reported promptly.
Type of litigation or proceedingReport to the Personal Information Protection Commission
Court or authorityPersonal Information Protection Commission
Suspended operationsFully suspended email delivery through the email delivery server on which unauthorized access was confirmed
Scheduled resumption dateThe planned resumption date is Not disclosed. Migration to a separate email delivery platform with adequate security measures is under way.
Measures to prevent recurrenceEmail delivery through the affected email delivery server has already been fully suspended / Migration to a separate email delivery platform with adequate security measures will be pursued / Monitoring and reassessment of the information security framework, including that of service providers, will be strengthened / The report to the Personal Information Protection Commission will be submitted appropriately in coordination with アララ株式会社
OutlookMigration to a separate email delivery platform, strengthened monitoring and reassessment of the information security framework, including that of service providers, and submission of a report to the Personal Information Protection Commission will be pursued. Individual notifications were sent to the 305 affected recipients on 5 November 2026.
Planned follow-up disclosureIf a revision to the earnings forecast or any other matter requiring disclosure arises, it will be reported promptly.
Items this document does not state (9)
PlaintiffDefendantDate of filing / date of actionClaim amount / surcharge amountAmount of receivables at risk of non-collection or delayed collectionInvestigation structureDirectors' and officers' liabilityVoting rights ownership percentage before the changeVoting rights ownership percentage after the change

These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.

The reasons the company gives

The company's own explanation, not something inferred from the numbers.

Because a server for the repica email delivery system operated and managed by アララ株式会社 was subject to unauthorized access by a third party.

How to read this page

This is not the documentKomori reads the disclosure the company filed and writes this summary. Figures are as stated by the company and are not audited.
Weight is not a verdictIt measures how much this changes what the company had already told the market. It is not a view on the shares.
Corrections happenIf the company reissues this disclosure, the page is rebuilt from the corrected version and the revision number moves up.
Notice concerning the leakage of personal information caused by unauthorized access to the email delivery service used by the Company (Second Report) | HASEGAWA CO.,LTD. (8230) timely disclosure | Komori