On 23 October 2026, TOKAI Holdings temporarily suspended the TLC Point website, app and My Page. The suspension was prompted by a suspected attempted unauthorised access by a third party, and no leakage of customer information or unauthorised use of points has been confirmed at this time.
TOKAI Holdings officially announced that it had suspended three services: the TLC Point website, the TLC Point app and TLC My Page. The suspension has continued since 22:00 on 19 October, with no restart date set, and the stated reason was a suspected attempted unauthorised access by a third party. The announcement identifies the affected services but does not include specific figures on the scope of the impact or details of the response.
As of the time of the announcement, the company said it was investigating whether unauthorised access had actually occurred. At the same time, no leakage of customer information or unauthorised use of TLC Points had been confirmed, and the scale of the damage and attack route had not been disclosed. The situation may change depending on the progress of the investigation.
The same day, the group separately announced the suspension of its websites to address a PHP vulnerability. No relationship between that technical issue and the suspension of the three services has been disclosed. The cause of the TLC member services suspension and the announced response to the technical vulnerability are being treated as separate matters.
Official notices should be checked for the recovery schedule and any impact on point balances. Warnings have been issued about scams such as fake login prompts, but information from sources other than official announcements should be treated with caution.