Unauthorized Access at Consolidated Subsidiaries (Second-Tier Subsidiaries) and the Potential Leakage of Personal Information
株式会社たまのや and 株式会社喜月堂セレオ (second-tier subsidiaries that are consolidated subsidiaries of the Company)
The electronic ordering systems for funeral flowers and offerings on the official websites operated by たまのや and 喜月堂セレオ
Unauthorized access by a third party
Related procedures
Report to the Personal Information Protection Commission and consultation with the police
Personal Information Protection Commission and police
Company response
A full investigation by external specialists, scheduled for completion around the end of October 2026
The Company will continue to monitor access to the systems and work to prevent recurrence on an ongoing basis by strengthening the site maintenance and operation framework. It will also consider further measures in the future, including a complete system update at たまのや and 喜月堂セレオ.
The impact of this incident on the Company's consolidated results is expected to be immaterial. If any matter arises that requires disclosure under the timely disclosure rules, the Company will promptly notify the public.
The Company will continue a full investigation by external specialists and will contact customers individually as appropriate if their personal information may have been leaked. It will strengthen the site maintenance and operation framework and consider further measures in the future, including a complete system update.
The investigation by external specialists is scheduled for completion around the end of October 2026. If any matter arises that requires disclosure under the timely disclosure rules, the Company will promptly notify the public.
| Item | Details |
|---|---|
| Event name | Unauthorized Access at Consolidated Subsidiaries (Second-Tier Subsidiaries) and the Potential Leakage of Personal Information |
| Date of occurrence | 10 September 2026 (たまのや), 11 September 2026 (喜月堂セレオ) |
| Date recognized / date notice received | 10 September 2026 (たまのや), 11 September 2026 (喜月堂セレオ) |
| Subject Entity | 株式会社たまのや and 株式会社喜月堂セレオ (second-tier subsidiaries that are consolidated subsidiaries of the Company) |
| Target Locations / Products | The electronic ordering systems for funeral flowers and offerings on the official websites operated by たまのや and 喜月堂セレオ |
| Cause | Unauthorized access by a third party |
| Impact on Earnings Forecast | The impact of this incident on the Company's consolidated results is expected to be immaterial. If any matter arises that requires disclosure under the timely disclosure rules, the Company will promptly notify the public. |
| Type of litigation or proceeding | Report to the Personal Information Protection Commission and consultation with the police |
| Court or authority | Personal Information Protection Commission and police |
| Investigation structure | A full investigation by external specialists, scheduled for completion around the end of October 2026 |
| Measures to prevent recurrence | The Company will continue to monitor access to the systems and work to prevent recurrence on an ongoing basis by strengthening the site maintenance and operation framework. It will also consider further measures in the future, including a complete system update at たまのや and 喜月堂セレオ. |
| Outlook | The Company will continue a full investigation by external specialists and will contact customers individually as appropriate if their personal information may have been leaked. It will strengthen the site maintenance and operation framework and consider further measures in the future, including a complete system update. |
| Planned follow-up disclosure | The investigation by external specialists is scheduled for completion around the end of October 2026. If any matter arises that requires disclosure under the timely disclosure rules, the Company will promptly notify the public. |
Items this document does not state (12)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.Because unauthorized access by a third party occurred and personal information may have been leaked externally. As of the present time, no evidence of personal information being transmitted or removed externally, actual leakage, unauthorized use or other harm has been confirmed.