Customer and Personal Information Leakage Risk
First written in FY2016. 1 of 5 entries say "Reframed", first in FY2017. Latest entry: FY2026.
Open Up Group moved to the "Worse" side of this theme in 2026, 1 year after the typical company in this theme (2025).
The whole theme swung hardest in 2025: 7 of 60 companies on the "Worse" side.
8 other companies' latest entry also says "Worsened".
- FY2026WorsenedAnnual report
「In addition, as the use of DX and AI in business operations expands and the importance of information systems and cybersecurity risks increases, we are strengthening measures against unauthorized access, cyberattacks, system failures and other risks.」
In addition to the existing risk of customer and personal information leakage, the importance of unauthorized access, cyberattacks and system failures associated with the expanded use of DX and AI was explicitly identified. - FY2021MitigatedAnnual report
「We also implement access controls and leakage prevention measures for IT equipment that handles personal information.」
In addition to education and policies concerning customer information and personal information, access controls and leakage prevention measures for IT equipment handling personal information were explicitly identified. - FY2019RestatedAnnual report
「The Group has established customer information management rules and a framework for appropriate information management, and works to improve information management standards by providing ongoing education and training to all employees. The Group handles personal information relating to many employees, job seekers and others. To manage this information appropriately, it has established personal information protection rules and other related policies, obtained the Privacy Mark, provided employee training and distributed information on related matters to raise employees’ awareness of information management, and works to ensure compliance with these rules.」
Customer information and personal information are managed separately, with ongoing documentation of policies, education and training, measures such as the PrivacyMark, and leakage risks. - FY2017ReframedAnnual report
「Because the Group’s employees have opportunities to access highly confidential information belonging to customer companies in the course of their work, the Group has established customer information management rules and a framework for appropriate information management. It works to improve information management standards by providing ongoing education and training to all employees.」
The disclosure separates the information leakage risk previously addressed as a single category into customer information management and personal information management, and specifies measures including rules, education and training, and the Privacy Mark. - FY2016First statedAnnual report
「Despite these measures, if circumstances such as the leakage or unauthorised use of various types of information arise, the Group’s performance could be affected through claims for damages or a loss of social credibility.」
The disclosure identifies the leakage and unauthorised use of customers’ confidential information and the personal information of employees and job seekers as risks.