Potential Leakage of Personal Information Due to Unauthorized Access at a Consolidated Subsidiary
株式会社２りんかんイエローハット (consolidated subsidiary)
The company's member-only server, 2りんかん member information, and 2りんかん app service
Attack involving malicious software
Company response
Partial suspension of the 2りんかん app service
Investigation and advice by external security experts and others
Measures to prevent recurrence will be implemented.
Related procedures
Report to the Personal Information Protection Commission and consultation with the relevant police authorities (litigation, administrative action, etc.: Not disclosed)
Personal Information Protection Commission and the relevant police authorities
If it becomes clear that the incident will have a material impact on financial results, we will make a timely disclosure.
Following investigation and advice by external security experts and others, measures to prevent recurrence will be implemented. A report will be submitted to the Personal Information Protection Commission, the matter will be discussed with the relevant police authorities, notices will be posted on the 2りんかん website and at stores, and individual emails will be sent to customers. A dedicated customer inquiry desk will be announced once the necessary arrangements are in place.
The customer inquiry desk will be announced promptly on the websites of the Company and 株式会社２りんかんイエローハット once the necessary arrangements are in place. If it becomes clear that the incident will have a material impact on financial results, a timely disclosure will be made.
| Item | Details |
|---|---|
| Event name | Potential Leakage of Personal Information Due to Unauthorized Access at a Consolidated Subsidiary |
| Date of occurrence | 20 April 2026 (date unauthorized access was detected and the company became aware of the incident; actual date of unauthorized access: Not disclosed) |
| Date recognized / date notice received | The evening of 20 April 2026 (date unauthorized access was detected) |
| Subject Entity | 株式会社２りんかんイエローハット (consolidated subsidiary) |
| Target Locations / Products | The company's member-only server, 2りんかん member information, and 2りんかん app service |
| Cause | Attack involving malicious software |
| Impact on Earnings Forecast | If it becomes clear that the incident will have a material impact on financial results, we will make a timely disclosure. |
| Type of litigation or proceeding | Report to the Personal Information Protection Commission and consultation with the relevant police authorities (litigation, administrative action, etc.: Not disclosed) |
| Court or authority | Personal Information Protection Commission and the relevant police authorities |
| Suspended operations | Partial suspension of the 2りんかん app service |
| Investigation structure | Investigation and advice by external security experts and others |
| Measures to prevent recurrence | Measures to prevent recurrence will be implemented. |
| Outlook | Following investigation and advice by external security experts and others, measures to prevent recurrence will be implemented. A report will be submitted to the Personal Information Protection Commission, the matter will be discussed with the relevant police authorities, notices will be posted on the 2りんかん website and at stores, and individual emails will be sent to customers. A dedicated customer inquiry desk will be announced once the necessary arrangements are in place. |
| Planned follow-up disclosure | The customer inquiry desk will be announced promptly on the websites of the Company and 株式会社２りんかんイエローハット once the necessary arrangements are in place. If it becomes clear that the incident will have a material impact on financial results, a timely disclosure will be made. |
Items this document does not state (11)
These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.
The reasons the company gives
The company's own explanation, not something inferred from the numbers.The member-only server of 株式会社２りんかんイエローハット was subject to unauthorized access in an attack involving malicious software.