Description of the attacks on the websites

 Description of the attacks on the websites

1.Date of occurrence of the event:2026/09/29
2.Cause of occurrence:Explanation of the hacking attack on the
external server.
3.Handling procedure:Upon the identification of
an automated cyberattack targeting the servers,
certain order information was accessed.
Upon notification of the incident, an incident response meeting
was promptly convened in accordance with the personal data
incident response and notification procedures,
with necessary protective measures implemented to mitigate
the impact and a third-party cybersecurity firm
engaged to assist in handling the incident.
In addition, the incident was proactively reported to
the relevant regulatory authorities,
with anti-fraud awareness notices disseminated
through the official website and mobile app to prevent
personal information from being exploited by fraudsters.
4.Anticipated possible loss or impact:No material impact on operations,
financial condition, or service provision is anticipated.
5.Amount of insurance claims that might be obtained:Not applicable.
6.Improvement status and future countermeasures:Through collaboration with
a third-party cybersecurity firm, network detection,
system monitoring, and security controls have been further
enhanced to ensure information security.
7.Any other matters that need to be specified:None