We have recently learned that unauthorized access by a third party occurred on "Studio," an external website building service provided by Studio Inc. that we used to operate the inquiry forms and other forms on the websites listed below. As a result, personal information submitted by customers and others through those forms may have been leaked externally.

・Minut noise sensor website （https://souonsensor.com/）: inquiry form and document request form
・mui Board website (https://mui.jp/): inquiry form and document request form regarding GX subsidies
・mui Board website (https://mui.jp/homeloan): inquiry form and catalog request form regarding home loans

First and foremost, we deeply apologize to our customers and all concerned parties.
Below is what has been confirmed to date and how we are responding.

1. Timeline
September 30 – October 1, 2026 (JST): A third party gained unauthorized access by exploiting a vulnerability in certain Studio features (this is the period currently confirmed by Studio Inc.).
October 14, 2026: Studio Inc. fixed the vulnerability, so that the information could no longer be retrieved from outside.
October 16, 2026: Studio Inc. announced the incident. We identified the affected information and reported the incident to the Personal Information Protection Commission on the same day.
At this time, we have not confirmed that the information was actually obtained by a third party. However, we are responding on the assumption that it may have been.

2. Information That May Have Been Leaked
Number of individuals potentially affected: 529 in total (excluding duplicates; this number may change as the investigation continues)

(1) Minut noise sensor website: inquiry form and document request form
Scope: Information submitted between February 10, 2026 and October 14, 2026 (210 individuals)
Information involved: Name, company name, phone number, email address, prefecture, number of properties, and any content entered in free-text fields (varies by form)

(2) mui Board website: inquiry form and document request form regarding GX subsidies
Scope: Information submitted between May 1, 2025 and October 14, 2026 (225 individuals)
Information involved: Company name, department name, contact person's name, email address, inquiry type, online meeting preference, and any content entered in the "Questions, etc." field

(3) mui Board website: inquiry form and catalog request form regarding home loans
Scope: Information submitted between November 25, 2025 and October 14, 2026 (96 individuals)
Information involved: Name, name in furigana (phonetic reading), email address, phone number, region, occupation, housing situation, name of the home builder or construction company under consideration, planned use of a home loan, and any content entered in the "Questions/Requests" field (varies by form)

None of these forms included credit card information, passwords, or similar data.
*Information that we hold in connection with the mui Board and the mui Home app is managed on a system separate from Studio and is not affected by this incident.

3. Secondary Harm
At this time, no secondary harm, such as misuse of the information, has been confirmed as a result of this incident.

4. Our Response
・After this notice is posted, we will notify each affected individual by email on a rolling basis.
・We have taken security measures, including deleting data stored on Studio and changing account passwords.
・We have reported the incident to the Personal Information Protection Commission.
・To prevent a recurrence, we will review the scope and retention period of personal information stored on external services, as well as how we manage our outsourcing partners.

5. Our Request to You
Suspicious emails, text messages, or phone calls impersonating mui Lab or Studio Inc. may be sent to take advantage of this incident.
Please do not open any links or attachments you do not recognize.
mui Lab will never ask you for passwords, credit card numbers, or similar information.
If you are asked for such information, please do not provide it.

6. Contact
mui Lab, Inc. Personal Information Inquiry Desk
Email: support@muilab.com

If you have not received an individual notification but believe you may have used any of the forms above during the periods listed in Section 2, please contact the desk above.

Reference
Studio Inc.
"[Important] Initial notice of unauthorized access and data exposure" 
https://studio.design/updates/unauthorized-access-2026-10

If any new facts come to light that we should share, we will promptly announce them on our website.
Once again, we deeply apologize to everyone concerned.