Notice Regarding the Leakage of Email Addresses Resulting from Unauthorized Access to Arara Inc.’s Email Delivery Service

We have received a report that the email addresses of certain customers registered as members of HAKONETRIP (hereinafter referred to as the “Website”) were disclosed to an external party due to unauthorized access to the email delivery service provided by Arara Inc., which our company uses for email distribution.

We sincerely apologize for the significant concern and inconvenience this incident may have caused.

1．Overview

For the distribution of email newsletters and other communications to customers registered as members of the Website, we use an external marketing tool. Emails are distributed through the email delivery service provided by Arara Inc. via that tool.

On November 2, 2026, we received a report that, due to unauthorized access by a third party to the email delivery service provided by Arara Inc., certain email addresses of members of the Website had been disclosed to an external party.

According to the results of an investigation conducted by Arara Inc. and related parties, with respect to our company, the affected information consists of the email addresses of customers who received emails from “小田急トラベル/Odakyu Travel” or the “小田急旅のサポートセンター/Odakyu Travel Support Center” between October 8, 2026 and October 29, 2026. We have been informed that no information other than email addresses was included in the affected data.

At this time, we have not received any reports indicating that personal information has been leaked from any other systems connected to the Website.

2. Personal Information Leaked and Number of Records

Email addresses: 63,006 records

*We have been informed that, with respect to our company, no personal information other than email addresses was included in the affected information.*

3. Email Addresses Affected by the Incident

5. Current Actions

(1)　Arara Inc. has reported this incident to the Personal Information Protection Commission. We are also taking the necessary actions in response to this incident.

(2)　We have suspended email distributions using Arara Inc.’s email delivery service.
*The emails listed in Section 4, “Emails Not Affected by the Incident,” continue to be sent because they are distributed through a separate system.*

(3)　We are currently confirming the details of the email addresses affected by this incident. Once we are able to identify the customers concerned, we will contact them individually by email.
*Please note that the migration to a different email delivery server may result in delays in sending notifications to affected customers.*
*If you are no longer a member of the Website at the time the notification is sent, you will not receive the notification email.*