Dear Customers

We have recently discovered that unauthorized access by a third party occurred to the email distribution service provided by Arara Co., Ltd. (hereinafter referred to as "Arara"), which is used by our business outsourcing partner, resulting in the leakage of our customers' email addresses to an external party

We sincerely apologize to our customers and all those involved for the great concern and inconvenience we have caused

We would like to report the following regarding the information we currently have and our response to this matter

1. Outline of the case

At our company, we outsource the handling of various announcements and email distributions to customers using the Tomizawa Shouten wholesale online shop (Tomizawa Shouten for Business service) and BakeJob to a company that provides email distribution services

On November 2, 2026, we received a report from our outsourced service provider that unauthorized access by a third party had occurred to the email distribution system provided by Arara Co., Ltd., resulting in the leakage of email addresses of our customers registered with the service

We have received a report regarding this matter from our outsourced service provider and are working in cooperation with them to confirm the scope of the impact and take appropriate action

2. Regarding the leaked information

The leaked information confirmed at this time is as follows:

• Target information: Email addresses only
• Number of cases: 33,909

*Some of the email addresses included are from customers who have unsubscribed

Please note that the following information was not included in the data breach in this case

- Customer's name
, company name
, address
, phone number
, password
, payment information such as credit card
, order history and purchase information

3. Current status of response

- Detailed investigation into the cause and scope of the leak
- Identification of affected customers
- Individual notification to affected customers
- Necessary reporting to relevant organizations
- Review of security management system for email distribution operations

At this time, no secondary damage resulting from this incident has been confirmed. If any new facts that should be made public come to light in the future, we will promptly notify you through our various websites listed below　　　　　　　　　　　　　　　　

◆Tomizawa Shouten Corporate Website

◆Tomizawa Shouten Wholesale Online Shop

◆BakeJob

4. A request to our customers

In connection with this incident, there is a possibility that suspicious emails, phishing emails, etc., impersonating our company or affiliated companies may be sent using the leaked email addresses

We kindly ask our customers to exercise caution and refrain from accessing any URLs, opening any attachments, or entering personal information, passwords, credit card information, etc., if they receive an email they do not recognize or that appears suspicious

Please note that we will never contact you by email or phone to ask for your login password or credit card information

5. Measures to prevent recurrence

We take this matter very seriously

Going forward, we will work in cooperation with our business partners and Arara Corporation to investigate the cause and prevent recurrence, while also further strengthening our personal information management system and our management and supervision system for external contractors

Once again, we sincerely apologize to our customers and all those involved for the great concern and inconvenience we have caused

<Contact information for inquiries regarding this matter>

TomizawaShouten
TomizawaShoutenWholesale Online Shop / BakeJob
Customer Inquiry Desk

Contact form ishere

Phone number: 0570-001919 (Navi Dial)

Reception hours: Weekdays 9:00-17:00 Closed on Saturdays, Sundays, and public holidays
Contact person: Customer Support Manager Endo

Reference:News release