Cool Japan Fund: server intrusion

The fund confirmed unauthorized server access on May 1 and restricted external access. It reported the incident to police, the privacy commission and the economy ministry, and announced an expert investigation into cause and scope. The initial notice did not identify affected data or publish a count. The August 28 final report identified network-device entry and possible exposure of 25 shareholder-related, about 1,080 investee-related and about 100 officer/employee records, including names, addresses, contacts, HR information and health-check results. Definitive exfiltration evidence and secondary harm were unconfirmed.