Personal Information Breach Caused by Unauthorized Access
Our subsidiary (name not disclosed)
Membership management system that manages member information
Unauthorized access by a third party
Related procedures
Report to the Personal Information Protection Commission
Personal Information Protection Commission
Company response
Our detailed investigation is ongoing (there is no mention of a third-party committee or similar body)
Blocking communications from the source of the attack, remediating vulnerabilities, implementing measures to block external access to the affected systems, conducting an emergency comprehensive inspection of all systems, implementing additional security measures and permanent recurrence prevention measures covering both the network and application layers, and reviewing the security framework
We will continue conducting a detailed investigation and monitoring, and will contact affected customers individually as appropriate based on the investigation results. We will proceed with the necessary measures, including reporting to the Personal Information Protection Commission.
If any new facts come to light, or as soon as further details are confirmed, we will promptly publish a follow-up disclosure.
| Item | Details |
|---|---|
| Event name | Personal Information Breach Caused by Unauthorized Access |
| Date of occurrence | 6 October 2026 (Tuesday) |
| Date recognized / date notice received | 6 October 2026 (Tuesday) (the date on which unauthorized access to our subsidiary's membership management system was confirmed) |
| Subject Entity | Our subsidiary (name not disclosed) |
| Target Locations / Products | Membership management system that manages member information |
| Cause | Unauthorized access by a third party |
| Type of litigation or proceeding | Report to the Personal Information Protection Commission |
| Court or authority | Personal Information Protection Commission |
| Investigation structure | Our detailed investigation is ongoing (there is no mention of a third-party committee or similar body) |
| Measures to prevent recurrence | Blocking communications from the source of the attack, remediating vulnerabilities, implementing measures to block external access to the affected systems, conducting an emergency comprehensive inspection of all systems, implementing additional security measures and permanent recurrence prevention measures covering both the network and application layers, and reviewing the security framework |
| Outlook | We will continue conducting a detailed investigation and monitoring, and will contact affected customers individually as appropriate based on the investigation results. We will proceed with the necessary measures, including reporting to the Personal Information Protection Commission. |
| Planned follow-up disclosure | If any new facts come to light, or as soon as further details are confirmed, we will promptly publish a follow-up disclosure. |
Items this document does not state (13)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.A third party gained unauthorized access to our subsidiary's membership management system. The underlying cause of the intrusion is not disclosed.