Risks of Cyberattacks and Information Leakage Associated with E-Commerce Expansion
First written in FY2024. 2 of 3 entries say "Mitigated", first in FY2025. Latest entry: FY2026.
The whole theme swung hardest in 2024: 12 of 87 companies on the "Worse" side.
45 other companies' latest entry also says "Mitigated".
- FY2026MitigatedAnnual report
「In preparation for potential incidents, we are also promoting the development of a cyber BCP (business continuity plan) and establishing a system for rapid response and recovery. In addition, to ensure security across the entire supply chain, we are working to strengthen our management system, including for outsourced service providers.」
Measures addressing cyber risks associated with e-commerce and other operations have been expanded beyond the authentication and authorization infrastructure and training to include a cyber BCP, a rapid recovery system, and supply chain management covering outsourced service providers. - FY2025MitigatedAnnual report
「For its internal network, the company is taking measures against cyberattacks by establishing an authentication and authorization infrastructure that combines measures against unauthorized access and malware, as well as device management, ID management, employee training and data leakage prevention, to counter targeted attacks.」
The company detailed its authentication and authorization infrastructure, device and ID management, employee training and checks on contractors in response to the risks of cyberattacks, system outages, information leakage and unauthorized use associated with its e-commerce and other businesses. - FY2024First statedAnnual report
「The Group provides products and services to general consumers, primarily through the Life Energy business and the operation of e-commerce sites. If cyberattacks such as computer viruses or unauthorized access cause the internal network system to stop operating, information to leak or systems to be misused, the Group’s reputation may decline and it may be subject to fines and penalties for violating laws and regulations.」
Against the backdrop of operating e-commerce sites and other services, the company disclosed cyberattacks, system outages, information leakage and unauthorized use as separate risks for the first time.