February 28, 2022
Apology and notice regarding a spoofed email posing as an employee of our company

We have completed our investigation into the "spoofed email'' that impersonated our employees, which we recently informed you about, and would like to report on the background and response.

[Background of occurrence and response]

• On Thursday, February 3, 2022, we confirmed that a suspicious email was being sent to multiple people from a third party pretending to be an employee of our company.
• On the same day, we confirmed that the email in question did not originate from within our company, and that there was no impact on our email services, including our mailing list.
• On Friday, February 4, 2022, an investigation detected a malware infection on one PC used by our employees, so we isolated the PC from the network and
  began an investigation and analysis.
  As a result, it was confirmed that the infection was suspected to be malware "Emotet".

After checking the status of the PC isolated from the network and the "spoofed email'' that pretended to be a company employee,
we discovered that some of the email records sent and received by the employee in 2013 and 2014 were being used for the "spoofed email.'' Confirmed.

We deeply apologize for the inconvenience and concern we have caused our customers and everyone involved.

We will continue to work to further strengthen our information security measures.