Investigations, recalls, restatements, lawsuits and late filings at Japanese companies.
Nitori Holdings says unauthorized access may have exposed up to 37.62 million records of member and order data, but not login passwords or credit-card information, and it expects a limited hit to consolidated results.
Ryohin Keikaku has postponed the online store's reopening with no date set, added cash-on-delivery recipients to the customers whose data may have been accessed, and will begin notifying affected customers on 10 November 2026.
A second Russian decree has brought the rest of JT's local companies under temporary management, and the company says its Russian business is about 25% of forecast adjusted operating profit and about ¥1.5tn of assets, with the earnings impact still under review.
Ryohin Keikaku has halted Muji's web store and nearly all app functions to strengthen security, targets a restart within one to two days, and says stores are open and the earnings impact should be limited.
Japan Tobacco says a Russian presidential decree signed on 5 November has placed four of its Russian manufacturing companies under temporary administration, and it is still assessing the details, its options and the impact on the group.
Sapporo Breweries restated end-June cash from ¥77.1bn to ¥217.1bn and its net financial liabilities to below zero, while total assets of ¥870.5bn and its income statement are not corrected.
An outside party reached a World subsidiary's business server on 17 October and the breach was detected on 28 October; about 1.2 million member records may have leaked, though the company has not confirmed that any payment data was exposed.
Matsuya Foods Holdings says a third party accessed its app management system, exposing 2,377,127 order and delivery records and a separate 2,000 to 3,000 app-member records that include encrypted passwords; the cause is under investigation.
Joshin says its member database server may have exposed up to about 6 million records, with smaller possible exposures in its subscription service and a renovation photo system, while the investigation continues and some services stay down.
and ST HD says a server intrusion may have exposed about 2.5mn customer records and 10,000 business-partner records, with payment data and customer-set passwords excluded, while member points remain unusable in stores and online.
Joshin Corporation says a third party accessed its network without authorization and some services are unavailable; the company recognized the access on October 16 and has filed a first report with Japan's privacy regulator because a personal-data leak cannot be ruled out.
Unauthorised access to the Fancl and Attenir online shops between 3 and 10 October exposed data on 368,184 Fancl and 417,312 Attenir members, Kirin said; it excludes card details, and the earnings effect is under review.
Bookoff Group Holdings corrected its breach disclosures to add occupation and nickname to the member data that may have leaked, while the affected-person count of about 6.38 million and the record count stay unchanged.
Wel-Dish has no date for its third-quarter or annual results, and says it plans to correct earlier years, though the periods affected and the amounts are still being determined.
Treasure Factory says credential theft through a phishing email caused the breach at its subsidiary, which had no two-step authentication; 136,464 people are affected, passkey authentication now covers all staff accounts and no misuse is confirmed.
Arclands cut net profit for the year to February 2026 from ¥8.09bn to ¥5.95bn after a special committee found a pet-business subsidiary group used consolidation numbers that differed from its accounting system.
Bookoff Group Holdings says 6,383,279 people were affected by the member-data breach, against 6,427,735 leaked member records, and will start emailing those affected on October 15; it says payment and bank data are not managed in the affected system.
A third party took member data from a Book Off subsidiary's system, covering up to about 6.43mn records; the company says no payment data was held there and is still counting the people affected.
Sapporo, Kirin and Asahi each disclosed JFTC action on October 7, 2026; Sapporo describes the suspicion as price restraint among four major alcohol makers, and all three say the earnings impact is unknown.
Monogatari says names, emails and phone numbers of 10,788,963 Yakiniku King app users leaked after unauthorised access; it reports no confirmed misuse or public release as of disclosure, while the cause and earnings impact remain under review.
An independent committee estimates the damage to Arclands' net profit for the year to February 2026 at ¥1.30bn after its pet-retail subsidiary's CFO overstated results, but Arclands expects the final restated accounts, due October 13, to differ.
MATSUMOTO INC., the Tokyo-listed school-album and commercial printer, says a fourth straight year of negative operating cash flow has left its funding for the next twelve months uncertain, after quarterly cash fell to ¥313.9mn from ¥676.7mn even as its net loss narrowed to ¥100mn.
Twelve AEON Kyushu stores and two AEON Mall shopping centers remained suspended through August after the July 28 Kumamoto Mall explosion, forcing AEON to strip them from its same-store sales and retroactively revise July's numbers while an outside panel investigates the cause.
Sakata Seed's final forensic report ties a Japan server breach to a public remote-access point and a separate US subsidiary intrusion to remote-access login credentials, and says neither has produced confirmed data misuse to date.