December 7, 2021

To whom it may concern

Z Holdings Corporation Kentaro Kawabe

President and Representative Director, Co-CEO Stock Code: 4689

Notice Regarding the Case in Which Some Users' Information of

LINE Pay Was Viewable

At LINE Pay Corporation (hereinafter "LINE Pay"), a consolidated subsidiary of Z Holdings Corporation (hereinafter "Company"), it has been found that information related to some users' campaign participation was viewable on GitHub, a software development platform.

The information that was viewable does not include names, addresses, phone numbers, e-mail addresses, credit card numbers, bank account numbers, etc. There is no evidence of any impact on users at this time. The information that was viewable has now been deleted, and LINE Pay has notified the relevant users.

Please note that LINE Pay has issued a press release with the same content as this announcement on December 6, 2021 at around 16:00.

The Company sincerely apologizes to its shareholders, investors, and other stakeholders for the inconvenience and concern caused by this situation.

1. Outline

In January and April, 2021, an employee of a group company to which LINE Pay outsources, investigated cases in which points were not awarded. Thereafter, on September 12, 2021, the program used to conduct the investigation and the information about the relevant payment was unintentionally uploaded to GitHub and was viewable.

As a result of investigating the access status of the information, it has been confirmed that the information was accessed by outsiders. It has also been confirmed that at present, the said information no longer remains on search engines or archived websites.

2. Scale

  • Period during which the information was viewable: around 15:13 September 12, 2021
  • - 18:45 November 24, 2021

  • Period of the information in question: December 26, 2020 - April 2, 2021
  • Number of accounts in question: 51,543 (LINE Pay users in Japan)
    *133,484 accounts when LINE Pay users of overseas Group companies are included.
  • Breakdown of the information in question: Identifier*1 of the relevant user, merchant control number*2, and campaign information (campaign code, etc.).
    *The campaign information may include the campaign name, payment amount, and payment date and time.
    *Name, address, phone number, e-mail address, credit card number, bank account number, etc., is not included.
  • Number of accesses to the information in question: 11 (number of accesses by outsiders; excludes accesses made by LINE Pay for investigation)

*1 This identifier is used to mechanically identify the users within the LINE app, and is different from the LINE ID used to add friends by ID search.

*2 The merchant control number is a value used by LINE Pay's system to identify the merchant or the companies using the service, and is different from the merchant ID. This number cannot be used to access the merchant My Page or the store apps.

3. Sequence of events and measures taken

18:27 November 24, 2021

While monitoring, detected the said information on

GitHub

18:37 November 24, 2021

Confirmed the said information on GitHub

18:45 November 24, 2021

Completed the deletion of the said information

from GitHub

13:05 November 30, 2021

Completed investigation of access status and

status of secondary spread of the said information

Around 16:00 December 6, 2021

Notified the relevant users

4. Future outlook

The Company expects the impact of this matter on the Group's consolidated business results for the fiscal year ending March 31, 2022 to be minor. Should there be any matters that need to be disclosed in the future, they will be announced promptly.

Disclaimer

This is an English translation of the release. This translation is prepared and provided for the purpose of the reader's convenience. All readers are recommended to refer to the original version in Japanese of the release for complete information.

Attachments

  • Original Link
  • Original Document
  • Permalink

Disclaimer

Z Holdings Corporation published this content on 07 December 2021 and is solely responsible for the information contained therein. Distributed by Public, unedited and unaltered, on 07 December 2021 08:41:02 UTC.