Komori
Occurring Fact9882YELLOW HAT LTD.Trading & Wholesale

[Second Report] Concerning the Leakage of Personal Information at Yellow Hat Due to Unauthorized Access

A third-party investigation confirmed that personal information relating to 1,797,124 Yellow Hat members had been leaked externally through unauthorized intrusion. The affected data also included addresses, dates of birth, genders, login IDs and passwords that were stored in a non-recoverable form, none of which had been identified as of the first report.

Worth reading
56In focus
0–100. This measures how worthwhile something is to read, not how good or bad the company is.
Direction
Deterioration
Direction inferred from the company’s description.
Scale
1797124
people affected
Wording
Conditional
How definitive the wording is.

Personal Information Breach Caused by Unauthorized Access at Yellow Hat

Subject Entity

YELLOW HAT LTD.

Target Locations / Products

Yellow Hat WEB Work Reservation System

Occurrence19 August 2026 (date unauthorized access was detected)
Same day
Awareness or receipt of notice19 August 2026 (date unauthorized access was detected)
This disclosure10/15/2026
Cause

Unauthorized intrusion into the Yellow Hat WEB Work Reservation System

Company response

Suspended operations

Blocking and suspending the Yellow Hat WEB Work Reservation System

Investigation structure

Investigation by a third-party investigative organization. The organization's name and establishment date are Not disclosed.

Measures to prevent recurrence

Continued implementation of enhanced security measures and system modifications, as well as regular vulnerability assessments

Related procedures

Type

Forensic investigation by a third-party investigative organization, final report to the Personal Information Protection Commission, and investigation by the relevant police department

Court or authority

Personal Information Protection Commission and jurisdictional police

Impact on Earnings Forecast

The response to this incident and associated costs are not expected to have a material impact on our business performance.

Outlook

We will continue to handle questions and inquiries through the dedicated help desk and fully cooperate with the Personal Information Protection Commission and the relevant police department in their investigations. Regular vulnerability assessments will also continue.

Event that occurred
ItemDetails
Event namePersonal Information Breach Caused by Unauthorized Access at Yellow Hat
Date of occurrence19 August 2026 (date unauthorized access was detected)
Date recognized / date notice received19 August 2026 (date unauthorized access was detected)
Subject EntityYELLOW HAT LTD.
Target Locations / ProductsYellow Hat WEB Work Reservation System
CauseUnauthorized intrusion into the Yellow Hat WEB Work Reservation System
Impact on Earnings ForecastThe response to this incident and associated costs are not expected to have a material impact on our business performance.
Type of litigation or proceedingForensic investigation by a third-party investigative organization, final report to the Personal Information Protection Commission, and investigation by the relevant police department
Court or authorityPersonal Information Protection Commission and jurisdictional police
Suspended operationsBlocking and suspending the Yellow Hat WEB Work Reservation System
Investigation structureInvestigation by a third-party investigative organization. The organization's name and establishment date are Not disclosed.
Measures to prevent recurrenceContinued implementation of enhanced security measures and system modifications, as well as regular vulnerability assessments
OutlookWe will continue to handle questions and inquiries through the dedicated help desk and fully cooperate with the Personal Information Protection Commission and the relevant police department in their investigations. Regular vulnerability assessments will also continue.
Items this document does not state (12)
Amount of Impact on Business PerformanceAccounting period in which recognizedPlaintiffDefendantDate of filing / date of actionClaim amount / surcharge amountAmount of receivables at risk of non-collection or delayed collectionScheduled resumption dateDirectors' and officers' liabilityVoting rights ownership percentage before the changeVoting rights ownership percentage after the changePlanned follow-up disclosure

These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.

The reasons the company gives

The company's own explanation, not something inferred from the numbers.

Customer data was leaked externally due to unauthorized intrusion into the Yellow Hat WEB Work Reservation System.

How to read this page

This is not the documentKomori reads the disclosure the company filed and writes this summary. Figures are as stated by the company and are not audited.
Weight is not a verdictIt measures how much this changes what the company had already told the market. It is not a view on the shares.
Corrections happenIf the company reissues this disclosure, the page is rebuilt from the corrected version and the revision number moves up.
[Second Report] Concerning the Leakage of Personal Information at Yellow Hat Due to Unauthorized Access | YELLOW HAT LTD. (9882) timely disclosure | Komori