Digital Arts, the Tokyo Prime-listed security software maker (code 2326), said a third party obtained credentials used to operate its cloud services and used them to get into the service operating environment. Information belonging to some customers of the affected services may have been viewed, the company said in a TDnet disclosure dated October 21.
How it was found
On October 9, 2026, citing a rise in cyberattacks, Digital Arts used AI to run a full inspection of its systems, products and internal environment. The check turned up traces of unauthorized access to the cloud service operating environment and the internal environment that earlier inspections had missed. Some of the traces date back to around July 2025.
The notice does not say the access was continuous over that period, and it does not say how the credentials were obtained.
What customers are asked to do
The affected cloud services are i-FILTER@Cloud, m-FILTER@Cloud (Modern Edition), m-FILTER MailAdviser Microsoft 365 edition, FINAL CODE@Cloud, z-FILTER and Desk.
To prevent secondary damage, Digital Arts asks every customer of these services to change both administrator and user passwords. It will contact some customers individually where further action is needed. Software versions that customers run in their own environments are not affected.
What is and is not confirmed
As of noon on October 21, Digital Arts had not confirmed that customer information was taken outside the company, and had received no reports of misuse or secondary damage. It also had not confirmed any new unauthorized access, and it is continuing to monitor.
The company said it has revoked the credentials used in the intrusion, replaced the credentials it uses for operations, stopped suspicious programs and replaced server authentication keys. It is also rebuilding its services and network with future cyber threats in mind.
Financial impact
Digital Arts said it is still assessing the effect on its results and will disclose anything that requires it promptly. It plans to report to the relevant authorities, cooperate as needed, and tighten credential management, access management and monitoring. Customers and partners can write to [email protected], and shareholders and investors to [email protected].