Joshin Corporation, the Osaka-based retailer listed on the Tokyo Stock Exchange's Prime market (code 8173), said its network was hit by unauthorized access from a third party and that some of its services cannot currently be provided. The company disclosed the incident in a notice dated October 19, 2026.
What the company says happened
Joshin said it became aware of the intrusion on Friday, October 16, 2026. It moved quickly to restrict access from outside, and the notice says those steps left it unable to provide some services. The notice does not list which services are suspended or say when they will return. It says only that the company is working toward restarting the halted services and preventing a recurrence.
Leak question still open
Joshin is working with an external specialist body to establish details of the intrusion and its scope. It is also checking whether personal information or other important information was leaked. The company said it cannot rule out a personal-data leak at this point and has made a first report to the Personal Information Protection Commission, Japan's privacy regulator. If a leak is later confirmed, it said it will promptly report to the relevant parties.
A leak is therefore not confirmed. The notice gives no figure for affected customers, does not name the attacker and does not describe the method of intrusion.
What comes next
Joshin apologized to customers and stakeholders and said it will announce any new facts through its official website and other channels. Customer inquiries go to its customer service office.