Risks of cyberattacks, system failures and information leaks
First written in FY2026-H1. 1 of 3 entries say "Materialised", first in FY2026-H1. Latest entry: FY2026.
The whole theme swung hardest in 2026: 31 of 106 companies on the "Worse" side.
79 other companies' latest entry also says "Restated".
- FY2026RestatedAnnual report
「当社は、ステークホルダーの皆さまの大切な情報を預かる責任ある企業として本件を重く受け止め、外部専門家のチェックを受けながら再発防止策とセキュリティ対策の徹底を図り、再発防止に全力を尽くしてまいります。」
2025年11月11日に確認されたサーバーへの不正侵入・情報漏えい可能性を引き続き開示し、外部専門家のチェックを受けた再発防止策とセキュリティ対策を進めている。 - 2026-08-19MitigatedOccurring FactSuggests it is closing out
「As the investigation into this matter has now been completed, we report below on the final damage situation, measures to prevent recurrence and other matters.」
The final report confirmed the completion of the investigation into unauthorized access at the company and its U.S. consolidated subsidiary, and provided a definitive account of the damage, entry route and scope of impact. No secondary damage or material impact on business activities was identified. Measures to prevent recurrence include reviewing network management, strengthening communications restrictions, strictly operating administrator privileges, 24-hour monitoring and information security training. The conclusion of the investigation and dedicated contact center suggests the incident has subsided, but does not indicate that cyber risk itself has disappeared. - FY2026-H1MaterialisedAnnual report
「If information-system functions are disrupted by cyberattacks, system failures or similar events, the Group’s business activities, operating results and financial position could be adversely affected, while information leaks could damage its social credibility. Although we had recognized these risks and taken countermeasures, on 11 November 2025 we confirmed unauthorized intrusion into our servers by a third party. A subsequent investigation found that some data had been accessed without authorization and may have been leaked externally.」
The company newly identifies cyberattacks, system failures and information leaks as risks affecting its critical information infrastructure. An actual incident occurred on 11 November 2025 involving unauthorized server intrusion, unauthorized access to some data and the possibility of external leakage.