EU Cyber Resilience Act (CRA) Reporting
For the purpose of complying with the EU Cyber Resilience Act (CRA), if you become aware of an actively exploited vulnerability in a ROHM product or a severe incident affecting the security of a ROHM product that is subject to the reporting requirements under the CRA, please contact us at the address below.
Contact: cra-reporting@rohm.co.jp
When contacting us, please provide the following information to the extent possible:
- 1.ROHM product name, part number, and version
- 2.Overview of the actively exploited vulnerability or severe incident
- 3.Date and time when you became aware of the vulnerability or incident, and the method used to identify or verify it
- 4.Information regarding its impact or any known exploitation
- 5.Your name, organization, and contact information
This contact point is dedicated exclusively to actively exploited vulnerabilities in ROHM products and severe incidents affecting the security of ROHM products that are subject to the reporting requirements under the CRA. For inquiries regarding product specifications, purchases, quality, general product support, or any other matters, please use the appropriate inquiry channel.
Please do not include or attach highly confidential information, personal information, exploit code, or similar sensitive information directly in an ordinary email. Instead, please contact us first at the address above. If necessary, we will provide instructions on how to submit such information securely.
Any personal information you provide will be used to respond to and maintain records of the relevant vulnerability or incident and will be handled in accordance with our Privacy Policy.