Risk of Leakage of Confidential and Personal Information
First written in FY2016. 3 of 5 entries say "Mitigated", first in FY2021. Latest entry: FY2025.
The whole theme swung hardest in 2026: 13 of 71 companies on the "Worse" side.
19 other companies' latest entry also says "Mitigated".
- FY2025Security measures specified in greater detail, including targeted-attack training, vulnerability assessments and off-site backupsAnnual report
「We are working to raise security awareness through thorough employee education and targeted phishing-email exercises, while also strengthening security measures, including external network vulnerability assessments, off-site data backups and the use of cloud services to ensure the stable provision of products and services.」
The response to information-leakage and cyberattack risks is specified in greater detail, covering education, training, vulnerability assessments, off-site backups, cloud measures and regular audits. - FY2023Information security measures further strengthenedAnnual report
「To mitigate these risks, we are further strengthening our data-backup framework and security measures to prevent unauthorised access. We also continuously monitor implementation through security audits.」
The disclosure reiterates the use of backups, measures to prevent unauthorised access and ongoing security audits, and states that these measures have been further strengthened. - FY2021Backups, firewalls and audits explicitly identified as countermeasuresAnnual report
「To mitigate these risks, we are developing a data-backup framework and implementing security measures, including firewalls to prevent unauthorised access. We also continuously monitor implementation through security audits.」
The disclosure adds specific technical measures and ongoing audits to address the risks of information leakage and cyberattacks. - FY2019Information leakage risk expanded to include cyberattacks, business disruption and data lossAnnual report
「However, infrastructure failures, cyberattacks or computer-virus infections may result in the suspension of business activities, the loss or leakage of data, or the suspension of product and service functions, potentially affecting our Group's business performance.」
The disclosure describes risks including infrastructure failures, cyberattacks and the suspension of business activities and service functions, in addition to the leakage of confidential and personal information. - FY2016First statedAnnual report
「However, if a serious incident occurs in the future, such as the leakage of confidential or personal information due to unauthorised external access, our Group's business performance may be adversely affected by claims for damages against the Group and a decline in its reputation.」
The company identifies the leakage of confidential and personal information due to unauthorised external access, claims for damages and reputational damage as risks.