Investigations, recalls, restatements, lawsuits and late filings at Japanese companies.
Digital Arts says stolen operating credentials gave a third party access to its cloud environment, with traces dating to around July 2025; as of noon on October 21 it had not confirmed data exfiltration, and it asks users of six cloud services to change passwords.
Arata said a consolidated subsidiary received a Japan Fair Trade Commission on-site inspection on suspicion of resale price maintenance, and that it will cooperate fully; the notice gives no financial impact.
Nidec's liability committee found nine former officers liable and counted ¥22.2bn of investigation costs among the company's losses, but did not apportion damages. Nidec says it is still considering whether to sue.
Nakayama Steel resumed hot rolling on October 17 after the September 12 fire, but downstream lines are still returning to normal in stages, the cause is under investigation and the financial hit has not been quantified.
Ransomware attackers took data from a database run by a non-consolidated Toho Holdings subsidiary, including healthcare workers' names and booking details, while recordings and content files were not on the database and the affected record count is unknown.
Joshin Corporation says a third party accessed its network without authorization and some services are unavailable; the company recognized the access on October 16 and has filed a first report with Japan's privacy regulator because a personal-data leak cannot be ruled out.
Ymirlink estimates that about 9 million cumulative records, including email addresses, were extracted from five systems behind its email delivery service, with the count of affected people and any earnings impact still unreported.
TradeWorks says it will bear all costs after a misconfigured admin function in the trading system it supplies to Iwai Cosmo Securities may have exposed names and email addresses of 4,611 customers, and it is checking its other financial-institution clients.
Santen Pharmaceutical's Chongqing joint venture, in liquidation since 2024, will apply for bankruptcy with about ¥3.3bn of liabilities, but the company says a fully provisioned ¥2bn loan means no new loss.
Nidec has the committee report on whether current and former officers are legally liable for its accounting misconduct; the notice gives no findings, promises a redacted version later, and says damages claims will be deliberated next.
Unauthorised access to the Fancl and Attenir online shops between 3 and 10 October exposed data on 368,184 Fancl and 417,312 Attenir members, Kirin said; it excludes card details, and the earnings effect is under review.
Bookoff Group Holdings corrected its breach disclosures to add occupation and nickname to the member data that may have leaked, while the affected-person count of about 6.38 million and the record count stay unchanged.
Yellow Hat says log analysis fixes the number of affected members at 1,797,124, slightly below its first estimate, but adds addresses, birth dates, gender and login IDs to the data taken; the booking system has restarted and the final report has gone to the privacy regulator.
Pasona Group says subsidiary Pasona is under a Japan Fair Trade Commission investigation into dispatch fee-setting and that it is cooperating fully; the quarterly report gives no allegation or outcome, and full-year guidance is unchanged.
Medley suspended its @link medical-institution system and patient app on October 14 after confirming unauthorized access; patient data may have leaked from as many as 787 institutions, and no restart date has been given.
Consec says its auditor found the final dividend for the year to March 2025 exceeded the legal distributable amount by ¥47mn; shareholders need not repay, and an outside committee will examine causes and responsibility.
Intruders reached Beauty Garage's servers between 10 and 12 October, and the company has confirmed 775,725 leaked records covering salon names, customer names, emails and phone numbers; it is still assessing the earnings impact.
After a ¥2.302bn net loss and a ¥2.239bn operating cash outflow, FIXER says a material uncertainty over its going-concern basis remains, with a ¥1.547bn cost cut under way and financing talks still unsettled.
A Delaware federal court found Shibuya infringed Steuben Foods patents and awarded $38.3mn in damages plus $10.3mn in prejudgment interest; the company plans to appeal and has yet to size the hit to its year to June 2027.
Wel-Dish has no date for its third-quarter or annual results, and says it plans to correct earlier years, though the periods affected and the amounts are still being determined.
AEON Mall booked a ¥536mn disaster loss and says an accident committee is still investigating the Kumamoto mall explosion and Uki ceiling collapse, while operating profit hit a record ¥44.0bn for the half year.
Treasure Factory says credential theft through a phishing email caused the breach at its subsidiary, which had no two-step authentication; 136,464 people are affected, passkey authentication now covers all staff accounts and no misuse is confirmed.
Ride On Express Holdings says up to about 6.5 million registrant records from its Gin no Sara, Kamatora and Sushi Jouto sites and apps may be exposed, though no leak is confirmed and official-channel ordering stays suspended.
Arclands cut net profit for the year to February 2026 from ¥8.09bn to ¥5.95bn after a special committee found a pet-business subsidiary group used consolidation numbers that differed from its accounting system.