Anti-fraud measures and security response costs for the 支払秘書 bill-payment service
First written in FY2019. 9 of 14 entries say "Mitigated", first in FY2020. Latest entry: 2026-10-01.
0 other companies' latest entry also says "Mitigated".
- 2026-10-01MitigatedOther Disclosures
「当社では、2020 年以降、不正・悪用の認定事案ゼロを継続しています。「OEM 電子マネー」と「地域マネー」にも FPoS を組み込み、利便性やサービス拡張性だけでなく、安全・安心を中核価値として提供します。」
支払秘書で実装したFPoSを新たな電子マネーサービスにも組み込み、2020年以降の不正・悪用の認定事案ゼロを実績として示している。セキュリティ対応の説明が新サービスへ拡張された。 - FY2026MitigatedAnnual report
「As cyberattacks increase, we, as a critical infrastructure operator, are implementing a range of security measures, including enhanced monitoring of network equipment, stress testing by external organizations and consulting agreements with information security specialists. In particular, because the “Shiharai Hisho” service is an electronic money service for individuals, measures to prevent fraud are extremely important. As anti-fraud measures, we have implemented certificate issuance using My Number Cards and a login function using electronic certificates.」
Regarding anti-fraud measures for Shiharai Hisho, the company describes responses including network monitoring, stress testing by external organizations, agreements with specialists, and identity verification using My Number Cards and electronic certificates. The risk of continuing response costs remains. - FY2025MitigatedAnnual report
「As fraud-prevention measures, the Company has implemented certificate issuance using the My Number Card and a login function using electronic certificates. However, if new security measures become necessary, they may affect the Company's financial results.」
As fraud-prevention measures for Shiharai Hisho, the Company implemented certificate issuance using the My Number Card and login using electronic certificates. The possibility of additional security-related costs remains. - FY2023-Q3RestatedAnnual report
「The company partnered with 36 banks, including Sumitomo Mitsui Banking Corporation and Japan Post Bank, and is proceeding with resumption efforts after completing security measures following a series of unauthorized-use incidents. As of 31 March 2023, the number of banks available for use had recovered to 25, and the company will continue working to increase the number, including through new additions.」
The Company has reconfirmed that, after completing security measures following the unauthorized use, it continues to resume bank connections and provide ongoing security measures. - FY2023-Q1RestatedAnnual report
「The Company had partnerships with 36 banks, including Sumitomo Mitsui Banking Corporation and Japan Post Bank, and proceeded with resuming connections after completing security measures in response to the unauthorized-use incidents. As of 31 October 2022, the number of banks available for connection had recovered to 24, and the Company will continue working to increase the number, including through new additions.」
The Company continues to resume bank connections and provide ongoing security measures after completing countermeasures following the unauthorized use, and has reconfirmed that the number of banks available for connection was 24 as of 31 October 2022. - FY2022MitigatedAnnual report
「The company completed partnerships with 36 banks, including Sumitomo Mitsui Banking Corporation and Japan Post Bank. It completed identity-verification security measures following a series of unauthorized-use incidents and is proceeding with resumption efforts. As of 1 August 2022, the number of banks available for use had recovered to 24, and the company will continue working to increase the number, including through new additions.」
After completing security measures related to identity verification, the number of banks available for connection recovered from 19 at the end of March 2022 to 24 as of 1 August. - FY2022-Q3MitigatedAnnual report
「The Company completed partnerships with 36 banks, including Sumitomo Mitsui Banking Corporation and Japan Post Bank, but after a series of unauthorized-use incidents, completed security measures related to identity verification and proceeded with the resumption of connections. As of the end of March 2022, the number of banks available for connection had recovered to 19, and the Company will continue working to increase the number, including through new additions.」
The Company completed security measures related to identity verification following the unauthorized-use incidents, and the number of banks available for connection recovered from the previously reported 15 to 19 as of the end of March 2022. - FY2022-Q2MitigatedAnnual report
「The Company completed partnerships with 36 banks, including Sumitomo Mitsui Banking Corporation and Japan Post Bank, but after a series of unauthorized-use incidents, completed security measures related to identity verification and proceeded with the resumption of connections. As of the end of January 2022, the number of banks available for connection had recovered to 15, and the Company will continue working to increase the number, including through new additions.」
The Company completed security measures related to identity verification following the unauthorized-use incidents, and the number of banks available for connection recovered from 12 at the end of July 2021 to 15 at the end of January 2022. - FY2021MitigatedAnnual report
「The company completed partnerships with 36 banks, including Sumitomo Mitsui Banking Corporation and Japan Post Bank. Following a series of unauthorized-use incidents, however, use was frozen at some banks, and the company is proceeding with resumption efforts after implementing identity-verification and related security measures. As of the end of July 2021, the number of banks available for use had recovered to 12, and the company will continue working to increase this number.」
Following the unauthorized-use incidents, identity-verification measures were implemented, and the number of banks available for connection had recovered to 12 as of the end of July 2021. - FY2021-Q3MitigatedAnnual report
「The Company had partnerships with 37 banks, including Sumitomo Mitsui Banking Corporation and Japan Post Bank, but after a series of unauthorized-use incidents, it suspended connections with some banks and proceeded with their resumption after implementing measures including eKYC, regarded as the most advanced form of identity verification as of October 2020. The Company believes that ongoing investment in security will continue to be necessary.」
Following the unauthorized-use incidents, the number of banks available for connection increased from 5 to 6 as of 30 April 2021, while the number of banks under temporary suspension decreased from 32 to 31. Ongoing investment in security remains necessary even after the implementation of eKYC. - FY2021-Q2MaterialisedAnnual report
「The number of partner banks has reached 37, including Sumitomo Mitsui Banking Corporation and Japan Post Bank, but following a series of unauthorized-use incidents, the Company temporarily suspended connections with some banks and proceeded with countermeasures.」
Following unauthorized-use incidents involving Shiharai Hisho, connections with some banks were actually suspended. As of 25 January 2021, connections with 32 of the 37 partner banks had been temporarily suspended, and measures including the implementation of eKYC were under way. - FY2021-Q1MaterialisedAnnual report
「Compensation related to the recent unauthorized use of Shiharai Hisho is expected to be approximately ¥1.5 million, and the Company is coordinating its response with financial institutions. It has also implemented the most advanced security measures currently available. The Company expects security measures to continue to incur a certain level of costs.」
Unauthorized use of Shiharai Hisho has actually occurred, with compensation expected to amount to approximately ¥1.5 million. The Company is responding in coordination with financial institutions and has implemented security measures, while continuing to expect a certain level of response costs going forward. - FY2020MitigatedAnnual report
「To address external attacks, the Company has commissioned an external organization to conduct stress testing and entered into a consulting agreement with an information security expert.」
Additional measures for fraud prevention and security relating to Shiharai Hisho are disclosed, including stress testing by an external organization and an agreement with an information security expert. - FY2019First statedAnnual report
「The new service Shiharai Hisho is a financial service related to electronic money, making fraud prevention extremely important. The Company has been advancing server-side security measures, including biometric authentication and real-time monitoring, but expects that ongoing measures will continue to be necessary. These security-related costs may affect the Company's financial results.」
The importance of fraud prevention for Shiharai Hisho and the continuing security-related costs, including biometric authentication and real-time monitoring, are presented as a standalone risk.