TOM GROUP (02383): A data security incident has occurred, and the investigation is still ongoing.

TOM GROUP (02383) has announced that on or around 8 September 2026, the Group detected a cyberattack on its servers located in Taiwan, which servers provide services to the "Business Weekly" division of Cite Media Holding Group Co., Ltd., a major subsidiary of the Company. The cyberattack resulted in the encryption of certain data held on the Group's servers located in Taiwan. On 9 September 2026, the data security incident extended to Hong Kong and affected the Group's servers located in Hong Kong, resulting in the encryption of certain data held on the Group's servers located in Hong Kong. Upon discovery of the data security incident, the Group immediately isolated and disconnected all affected systems located in Taiwan and Hong Kong from the internet to prevent further spread of the cyberattack. The Group has engaged cybersecurity experts and consultancy firms to (i) assist in investigating the cause and scope of the data security incident; (ii) assess the integrity of the Group's data; and (iii) review the security of the Group's information systems. As at the date of this announcement, the investigation is still ongoing, and it is currently unable to determine whether the data security incident has caused any data or information leakage or loss, and if so, the extent of such leakage or loss. The Group will take appropriate further actions upon completion of the investigation. The Group is working closely with cybersecurity experts and consultancy firms to advance the investigation. The Group is conducting a comprehensive assessment of the impact of the data security incident on its business and operations. The Group places great importance on data security and will continue to strengthen its information system security measures, using its best efforts to prevent similar incidents in the future. The Group will also provide further updates in due course. In addition, as at the date of this announcement, the Group has reported the data security incident to the relevant authorities in Taiwan and Hong Kong. The Group will continue to assess its legal and regulatory obligations in order to make further notifications to other relevant authorities as and when necessary, and will promptly cooperate with the investigations of the relevant authorities.