Park24 expects to book a ¥5.5bn extraordinary loss in the quarter to 31 October 2026, and has cut its forecast for profit attributable to owners of the parent from ¥44.0bn to ¥38.5bn, a 12.5% reduction. The loss covers goodwill payments to customers hit by the Times Car breach and other response costs, according to the company's guidance revision. For background, see Earlier Tokyo Brief coverage.
What the forecast changes
The revision is confined to the bottom line. Forecast sales (¥411.0bn), operating profit (¥42.5bn) and ordinary profit (¥39.5bn) are unchanged from the 15 June forecast, and so is the annual dividend forecast of ¥65 a share. Forecast earnings per share fall from ¥257.76 to ¥225.54. The company's reference figure for the year to October 2025 was net profit of ¥15.9bn.
| Metric | Previous | Revised |
|---|---|---|
| Net sales | ¥411.0bn | ¥411.0bn |
| Operating profit | ¥42.5bn | ¥42.5bn |
| Ordinary profit | ¥39.5bn | ¥39.5bn |
| Net profit | ¥44.0bn | ¥38.5bn |
| Net income per share | ¥257.76 | ¥225.54 |
The company says the loss is for goodwill payments and "various response costs". The release does not split the ¥5.5bn between the two. The unchanged operating forecast is the company's current view and not a cap on later costs: it says it will keep watching usage trends and the effect on results.
What the forensic report found
In a separate release the same day, Park24 said the external forensic investigation is complete. It concluded that a vulnerability in the Times Car web system was exploited. The attacker got in, searched the system and used what it obtained to reach the database and file areas. The company withheld technical detail to prevent secondary harm.
The release distinguishes between access and transmission. Of the identity-document images, 1,464,800 were encrypted and showed traces of both access and external transmission. A further 891,602 were accessed with no trace of transmission, for 2,356,402 in all. The company had earlier warned of about 1.6mn images at risk. Separately, 6,628,007 accounts had data such as name, address, birth date and driving-licence information accessed and sent out.
Because the images were encrypted, even confirmed transmission does not mean the contents can be viewed. Park24 adds that it cannot fully rule out decryption in future. As far as it knows, nothing shows the leaked data has been sold or published, and it is monitoring information channels including the dark web.
Payments and the usage question
Customers whose encrypted ID images showed both access and transmission will receive goodwill payments worth ¥3,000, in cash or vouchers. Park24 says the form and method of payment are still being decided.
The company has also changed how it handles identity documents. It previously kept the images through membership and for seven years after a member left. It now deletes them once registration checks are complete, and will delete all images it currently holds by the end of October 2026. A committee led by outside directors, with external experts, will examine the group's internal controls and governance. Park24 plans to announce security and governance measures around year-end.
The mobility business is the open commercial question. Park24 says membership trends were affected to a degree right after the incident was announced, while daily sales have stayed at pre-incident levels. The company gives no membership figures, and says it is still watching usage trends and the earnings effect.