Komori
Occurring Fact9843Nitori Holdings Co.,Ltd.Retail

Apology and Notice Regarding the Potential Leakage of Personal Information Due to Unauthorized Access to Our Systems

On 6 November 2026, we confirmed unauthorized access to systems managed by the Company by a third party and determined that up to 37.62 million items of personal information may have been leaked externally. The scope and number of affected records are still under investigation. Login passwords and credit card information are not affected.

Worth reading
51Recurring
0–100. This measures how worthwhile something is to read, not how good or bad the company is.
Direction
Deterioration
Direction inferred from the company’s description.
Scale
3762
ten thousand items
Wording
Avoiding a definitive answer
How definitive the wording is.

Apology and Notice Regarding the Potential Leakage of Personal Information Due to Unauthorized Access to Our Systems

Subject Entity

Nitori Holdings Co.,Ltd.

Target Locations / Products

Order data for our products placed through systems managed by the Company, Nitori Net and the official Nitori shop on the EC marketplace.

OccurrenceThe third-party access may have occurred between mid- and late October 2026, and the unauthorized access was discovered on 6 November 2026.
Same day
Awareness or receipt of notice6 November 2026
This disclosure11/09/2026
Cause

Unauthorized access by a third party. The cause and intrusion route are still under investigation.

Amount of Impact on Business Performance

The impact on consolidated results is expected to be limited. The amount and accounting classification are Not disclosed.

Impact on Earnings Forecast

The impact on consolidated results is expected to be limited. Any revision to the earnings forecast is Not disclosed.

Related procedures

Type

Reports to and consultations with the Personal Information Protection Commission, the police and other relevant authorities.

Court or authority

Personal Information Protection Commission, police and other relevant authorities

Company response

Investigation structure

The investigation will continue in cooperation with external specialist organisations.

Measures to prevent recurrence

Review access controls, authentication and authorisation management, monitoring systems and other measures, and implement measures to prevent recurrence.

Outlook

With the cooperation of external specialist organisations, we will confirm the facts and investigate the cause. Based on the investigation results, we will review access controls, authentication and authorisation management, monitoring systems and other measures. Affected customers will be contacted sequentially by email or post.

Planned follow-up disclosure

If any matter requiring further disclosure is identified, we will promptly provide an update.

Event that occurred
ItemDetails
Event nameApology and Notice Regarding the Potential Leakage of Personal Information Due to Unauthorized Access to Our Systems
Date of occurrenceThe third-party access may have occurred between mid- and late October 2026, and the unauthorized access was discovered on 6 November 2026.
Date recognized / date notice received6 November 2026
Subject EntityNitori Holdings Co.,Ltd.
Target Locations / ProductsOrder data for our products placed through systems managed by the Company, Nitori Net and the official Nitori shop on the EC marketplace.
CauseUnauthorized access by a third party. The cause and intrusion route are still under investigation.
Amount of Impact on Business PerformanceThe impact on consolidated results is expected to be limited. The amount and accounting classification are Not disclosed.
Impact on Earnings ForecastThe impact on consolidated results is expected to be limited. Any revision to the earnings forecast is Not disclosed.
Type of litigation or proceedingReports to and consultations with the Personal Information Protection Commission, the police and other relevant authorities.
Court or authorityPersonal Information Protection Commission, police and other relevant authorities
Investigation structureThe investigation will continue in cooperation with external specialist organisations.
Measures to prevent recurrenceReview access controls, authentication and authorisation management, monitoring systems and other measures, and implement measures to prevent recurrence.
OutlookWith the cooperation of external specialist organisations, we will confirm the facts and investigate the cause. Based on the investigation results, we will review access controls, authentication and authorisation management, monitoring systems and other measures. Affected customers will be contacted sequentially by email or post.
Planned follow-up disclosureIf any matter requiring further disclosure is identified, we will promptly provide an update.
Items this document does not state (11)
Accounting period in which recognizedPlaintiffDefendantDate of filing / date of actionClaim amount / surcharge amountAmount of receivables at risk of non-collection or delayed collectionSuspended operationsScheduled resumption dateDirectors' and officers' liabilityVoting rights ownership percentage before the changeVoting rights ownership percentage after the change

These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.

The reasons the company gives

The company's own explanation, not something inferred from the numbers.

Unauthorized access to our systems by a third party. The cause, intrusion route, scope of impact and whether any secondary damage has occurred are still under investigation.

How to read this page

This is not the documentKomori reads the disclosure the company filed and writes this summary. Figures are as stated by the company and are not audited.
Weight is not a verdictIt measures how much this changes what the company had already told the market. It is not a view on the shares.
Corrections happenIf the company reissues this disclosure, the page is rebuilt from the corrected version and the revision number moves up.