An unauthorized access incident occurred at "Furusato Choice," the hometown tax donation website operated by Trustbank, a CHANGE Holdings subsidiary, resulting in the external leakage of approximately 4.45 million members' personal information.
Trustbank disclosed the unauthorized access on the 20th. The information leak was identified after the incident occurred on the 17th and access patterns differing from normal were confirmed on the 19th. The leaked information includes names, email addresses, addresses, telephone numbers, hashed passwords and estimated donation deduction amounts. "Furusato Choice" and related services have been suspended since 15:50 on the 19th.
Trustbank plans to complete its report to the Personal Information Protection Commission on the 20th and submit a damage report to the police on the 21st. The company said it will strengthen its security measures, monitoring and information management systems. The impact on consolidated results for the fiscal year ending March 2027 is currently under review.
The share price has remained under selling pressure following the announcement, reflecting concerns about its impact on earnings.