1.Date of occurrence of the event:2026/10/14
2.Cause of occurrence:Statement regarding an automated attack targeting
the Company's Commerce Cloud database.
3.Handling procedure:The Company identified an automated attack on its
Commerce Cloud database involving the unauthorized extraction of certain
information.The incident has been contained, and the matter has been reported
to the police.In accordance with its personal data incident reporting and
response procedures,the Company convened an incident response meeting,
engaged an independent third-party cybersecurity firm to assist with the
investigation,implemented necessary protective measures to mitigate the
impact, and notified the relevant competent authorities as required by law.
To help prevent personal data from being exploited for fraud, the Company has
also provided fraud-prevention guidance via email and other communication
channels.
4.Anticipated possible loss or impact:Based on the Company's current
assessment,the incident has no material impact on its operations.
5.Amount of insurance claims that might be obtained:Not applicable.
6.Improvement status and future countermeasures:
(1)Strengthen Monitoring and Defense:Enhance round-the-clock monitoring and
strengthen overall system security.
(2)Engage Third-Party Experts for Investigation:Collaborate with external
experts to conduct an in-depth investigation and deploy protective mechanisms
across all relevant servers.
(3)Reinforce Network Segregation:Strengthen network segregation among
internally developed systems, third-party systems, and the office network
environment to reduce the risk of intrusion.
(4)Ongoing Security Enhancements:Continue to enhance information security
management and protective measures based on the investigation findings.
(5)Regulatory Reporting and Customer Notification:Notify the competent
authorities as required by law, proactively notify affected customers via
email and other channels, and take appropriate follow-up measures.
7.Any other matters that need to be specified:None