{"id":781,"date":"2026-10-19T16:40:00","date_gmt":"2026-10-19T07:40:00","guid":{"rendered":"https:\/\/www.tohoyk.co.jp\/en\/?p=781"},"modified":"2026-10-20T08:47:11","modified_gmt":"2026-10-19T23:47:11","slug":"notice-regarding-unauthorized-access-and-information-leakage-at-a-subsidiary","status":"publish","type":"post","link":"https:\/\/www.tohoyk.co.jp\/en\/cate-others-en\/781\/","title":{"rendered":"Notice Regarding Unauthorized Access and Information Leakage at a Subsidiary"},"content":{"rendered":"\n<p class=\"vk_block-margin-xs--margin-bottom\">TOHO HOLDINGS CO.,LTD. (the \u201cCompany\u201d) hereby announces that it has been confirmed that a database managed by its non-consolidated subsidiary, enTouch KK (Head Office: Tokyo; Representative Director: Tamayo Tsujiura; hereinafter \u201cenTouch\u201d), which operates a remote detailing business (a business providing information remotely to medical institutions) and other services, was subject to unauthorized access by a third party, and that a portion of the information stored therein was leaked to the outside.<br>\n\u3000We deeply apologize for the considerable inconvenience and concern this may cause to all parties concerned.<br>\n\u3000In this regard, the remote detailing business is conducted either under outsourcing contracts from TOHO PHARMACEUTICAL CO.,LTD. (Head Office: Tokyo; President and Representative Director: Akira Umada), a pharmaceutical wholesaling subsidiary of the Company, or under direct outsourcing contracts between enTouch and pharmaceutical companies.<br>\n\u3000Based on the report received from enTouch, the Company announces the facts that have been confirmed at this time and the status of response as follows.\n<\/p>\n\n\n\n<p class=\"vk_block-margin-xxs--margin-bottom\"><br>1. Overview of the incident and current status<br>At around 16:00 on October 13, 2026, it was discovered that data related to the remote detailing business had been leaked to the outside from a database managed by enTouch. The incident was caused by unauthorized access by a third party claiming to be a ransomware group, and it has been confirmed that information in the database held by enTouch was exfiltrated.<br>\n\u3000This event occurred solely within the system managed by enTouch and is completely isolated from other systems within the Company\u2019s group; therefore, there is no impact on any other systems of the Company\u2019s group. In addition, no alteration or deletion of data has been confirmed, and there is no disruption to the business continuity of enTouch.<br>\n<\/p>\n\n\n\n<p class=\"vk_block-margin-xs--margin-bottom\"><br>2. Information that may have been leaked<br>The information confirmed to have been leaked at this time is as follows. The exact number of affected items and the detailed scope of impact are currently under investigation:<br>\n  \u30fb Names, affiliated medical institutions, and prefectures of location of healthcare professionals who used the service<br>\n  \u30fb Information of users accessing the platform (administrators, eMRs, etc.), including names and email addresses<br>\n  \u30fb Phone numbers and email addresses entered as contact information upon reservation<br>\n  \u30fb Product names and pharmaceutical company names subject to reservation<br>\n  \u30fb Reservation creation date and time, interview date and time, and interview status<br>\n\nNote: Content files used for providing information in projects and recorded video\/audio data are not stored in the affected database and are therefore outside the scope of this information leak.<br>\n<\/p>\n\n\n\n<p class=\"vk_block-margin-xxs--margin-bottom\"><br>3. Measures taken<br>Immediately following the discovery of this incident, enTouch implemented the following emergency defensive measures:.<br>\n  \u30fb Application of security patches to the software accessing the database<br>\n  \u30fb Preservation of access logs and forced reset of all passwords<br>\n\u30fb Consultation with the Cybercrime Division of the Tokyo Metropolitan Police Department<br>\n\u30fb Submission of a report to the Personal Information Protection Commission (PIPC) (Reports regarding matters based on business outsourcing from Toho Pharmaceutical are submitted by TOHO PHARMACEUTICAL)\n  \n<br>\n<\/p>\n\n\n\n<p class=\"vk_block-margin-xxs--margin-bottom\"><br>4. Future actions and measures to prevent recurrence<br>enTouch is in the process of engaging an investigation by an external specialized agency (a forensic investigation firm) and is currently working in cooperation with experts to determine the cause, identify the scope of impact, and examine countermeasures. We kindly ask our customers to remain vigilant regarding suspicious emails or communications.<br>\n\u3000We once again offer our deepest apologies to all related parties for the immense concern and inconvenience caused. Should any new significant facts come to light as the investigation progresses, we will promptly disclose them.<br><br>\n<\/p>\n<br><br><img decoding=\"async\" src=\"\" >","protected":false},"excerpt":{"rendered":"<p>TOHO HOLDINGS CO.,LTD. (the \u201cCompany\u201d) hereby announces that it has been confirmed that a database managed by  [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_editorskit_title_hidden":false,"_editorskit_reading_time":0,"_editorskit_is_block_options_detached":false,"_editorskit_block_options_position":"{}","vkexunit_cta_each_option":"","footnotes":""},"categories":[136],"tags":[],"class_list":["post-781","post","type-post","status-publish","format-standard","hentry","category-cate-others-en"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.tohoyk.co.jp\/en\/wp-json\/wp\/v2\/posts\/781","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tohoyk.co.jp\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.tohoyk.co.jp\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.tohoyk.co.jp\/en\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tohoyk.co.jp\/en\/wp-json\/wp\/v2\/comments?post=781"}],"version-history":[{"count":3,"href":"https:\/\/www.tohoyk.co.jp\/en\/wp-json\/wp\/v2\/posts\/781\/revisions"}],"predecessor-version":[{"id":785,"href":"https:\/\/www.tohoyk.co.jp\/en\/wp-json\/wp\/v2\/posts\/781\/revisions\/785"}],"wp:attachment":[{"href":"https:\/\/www.tohoyk.co.jp\/en\/wp-json\/wp\/v2\/media?parent=781"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.tohoyk.co.jp\/en\/wp-json\/wp\/v2\/categories?post=781"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.tohoyk.co.jp\/en\/wp-json\/wp\/v2\/tags?post=781"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}