Elitz Holdings (TSE: 5533) said its Kyoto-based rental-housing brokerage subsidiary stored tenant-applicant email exchanges in a cloud environment that had inadequate unauthorized-access restrictions, and the company still cannot say whether anyone actually got at the data.
An external research firm flagged the access-control gap on August 17, 2026. Elitz says the subsidiary fixed the problem the same day. The exposed files held correspondence and attached documents exchanged with rental applicants from April 3, 2021, through the recent date of discovery, and some of that material included personal information.
What Elitz has not established is whether any of that information actually left the company's systems, or how many people would be affected if it did. Both points remain under investigation, and Elitz says it will issue a further update once it has answers.
Despite the open questions, Elitz is already telling investors that the episode will have only a minor effect on group earnings for the fiscal year ending September 2026. That is a confident number to attach to an incident whose actual scope, in the company's own words, is still being worked out.