A third party recently gained unauthorized access to Commune, a service provided by Commune Inc. Commune is used as the system infrastructure for Kotoportal, the official community for our company’s service Kotodaman.

As a result of the unauthorized access, we have determined that some Kotoportal member information may have been viewed or obtained by an external party.

We deeply apologize for the inconvenience and concern this causes our users.

Kotoportal services are currently suspended, and we have not confirmed any misuse of the leaked information or secondary damage at this time. Furthermore, passwords, names, addresses, phone numbers, and payment information were not viewed or obtained.

■ Incident Overview

Between October 5 and October 6, 2026 (JST), a third party gained unauthorized access to Commune, a service provided by Commune Inc.

For details regarding this incident, please refer to the following announcement from Commune Inc.
https://communeinc.com/ja/news/2026oct09 (Japanese only)

■ Information That May Have Been Viewed or Obtained

Affected Users: 750 members of Kotoportal (including 749 whose affected information included email addresses)

Affected Information: Email addresses, member IDs, icons, nicknames, self-introductions, profile items*, number of points, and joined groups

We will contact the affected users individually via email at a later date.

*There are four profile items as follows:

• Response to “Do you wish to display categories containing posts with story spoilers?”
• Prefecture of residence / Kotomodachi ID in the Kotodaman app
• Kotodamari ID of the Kotodamari the user belongs to in the Kotodaman app
• MIXI ID linkage status (whether linked or not)

■ Impact on the Kotodaman Game

Game accounts, payment information, and other data for the main Kotodaman game are managed on our own systems, which are separate from Kotoportal (Commune Inc.’s system). This data has not been affected by this incident.

■ Cause of the Incident

This incident occurred because multiple vulnerabilities in the system provided by Commune Inc. were exploited by a third party. We have confirmed that the incident was not caused by any configuration or operational deficiencies on our part.

As a company that provides a service using Commune Inc.’s system, we take this incident very seriously.

■ Response Status

Commune Inc. has fixed the system vulnerabilities used for unauthorized access and blocked the access routes.

The Kotoportal service is currently suspended for temporary maintenance.

We are also checking the safety of the Commune system and its operations. Kotoportal will not resume service until safety concerns have been allayed and security issues have been resolved, including the measures taken in response to this incident.

■ A Request to Our Users

Please be cautious of suspicious emails that claim to be from Kotodaman, Kotoportal, or Commune Inc. Do not access URLs or open attachments in any suspicious emails.

Neither we nor Commune Inc. will ever ask for your password via email or phone.

For security reasons, all members are currently logged out of Kotoportal. Please log in again once Kotoportal resumes service.

■ Contact Information

Inquiries regarding the unauthorized access incident:
user-security@commune.co.jp

Inquiries regarding the use of Kotoportal:
support-kotodaman+portal@xflag.com

We sincerely apologize once again for the inconvenience and concern this has caused our users.