Leakage, loss or damage of customer information
First written in FY2017. 2 of 6 entries say "Mitigated", first in FY2018. Latest entry: FY2026.
The whole theme swung hardest in 2026: 26 of 91 companies on the "Worse" side.
28 other companies' latest entry also says "Mitigated".
- FY2026MitigatedAnnual report
「The Group has established two targets: zero serious incidents and no more than 5 minor incidents. It has achieved these targets for 9 consecutive fiscal years since fiscal 2017,」
The company states that it achieved its targets of zero serious information-asset incidents and no more than 5 minor incidents for 9 consecutive fiscal years. - FY2022RestatedAnnual report
「The Group handles a large amount of personal and confidential information. If these information assets are subjected to attacks by malicious third parties, or if information is leaked through the negligence or intent of Group-related parties, such as employees or contractors,」
The Group continues to recognize the risk of third-party attacks on personal and confidential information and leakage by related parties. - FY2020WorsenedAnnual report
「The Group handles a large amount of personal and confidential information. If information assets are compromised through attacks by malicious third parties or leakage caused by the negligence or intentional acts of Group personnel, including employees and outsourced service providers, the Group's performance could be affected by a decline in its social credibility and brand image, payments of compensation for resulting damages and legal penalties.」
The scope of the risks is clearly defined to include the leakage of customer information and other information, confidential information in general, attacks by malicious third parties, leakage caused by the negligence or intent of related parties, and legal penalties. - FY2019RestatedAnnual report
「Accordingly, the Group works to ensure thorough management of customer information by implementing necessary and appropriate measures to prevent the leakage, loss or damage of personal data, including employee training on regulations such as the Act on the Protection of Personal Information and oversight of outsourced service providers.」
The Group continues its policy for managing the risks of customer information leakage, loss and damage through employee training, oversight of contractors and other measures. - FY2018MitigatedAnnual report
「In preparation for a possible incident, the Group has taken out cyber risk insurance, a corporate-wide insurance policy covering Group companies.」
In addition to employee training and oversight of contractors, the Group identifies cyber risk insurance as an additional measure for managing customer information. - FY2017First statedAnnual report
「If a serious problem arises in the management of customer information, including incidents caused by force majeure, the resulting decline in trust and claims for damages could affect the Group's performance and future business development.」
The Group indicates that management problems involving the large volumes of customer information it acquires could lead to a decline in trust, claims for damages and an impact on future business development.