System Failures and Personal Information Leaks
First written in FY2016. 4 of 7 entries say "Restated". Latest entry: FY2026.
Gurunavi moved to the "Worse" side of this theme in 2026, 1 year after the typical company in this theme (2025).
The whole theme swung hardest in 2026: 31 of 105 companies on the "Worse" side.
22 other companies' latest entry also says "Worsened".
- FY2026WorsenedAnnual report
「The Group's services depend on complex network and cloud infrastructure and are constantly exposed to the risk of security breaches exploiting increasingly sophisticated cyberattacks, including attacks that misuse AI, and vulnerabilities in the supply chain.」
The Group expanded the conventional risks of system failures and personal information leaks to include attacks that misuse AI, supply-chain vulnerabilities, delays in migrating to a zero-trust architecture, and cyber resilience. - FY2025MitigatedAnnual report
「The Group is working to build a flexible and disaster-resilient infrastructure by gradually migrating to a cloud environment.」
As a response to the risks of system failures and information loss, the Group is gradually migrating to a cloud environment in addition to its existing backups, redundancy, and monitoring measures. - FY2022RestatedAnnual report
「Accordingly, the Group has taken all reasonably foreseeable measures regarding its computer network systems, including strengthening its backup center, upgrading and duplicating various servers, introducing an authentication system for entering server rooms, and installing a system to monitor the use of its internal computer networks.」
The Group continues to disclose the risks of system failures, service interruptions, and loss of user information, as well as measures including backups, redundancy, authentication, and monitoring. - FY2020RestatedAnnual report
「The Group's services are provided over the internet and depend heavily on the reliable operation of internet connectivity and infrastructure, including internal and external computer networks. Accordingly, the Group has taken all reasonably foreseeable measures regarding its computer network systems, including strengthening its backup center, upgrading and duplicating various servers, introducing an authentication system for entering server rooms, and installing a system to monitor the use of its internal computer networks. However, if system outages or other failures occur due to destructive acts from outside the Group, human error within the Group, natural disasters, or other causes, the Group's services to customers could be suspended or user information could be lost.」
The Group continues to disclose the risks of system failures, service interruptions, and loss of user information, as well as measures including backups, redundancy, authentication, and monitoring. - FY2019RestatedAnnual report
「Regarding its computer network systems, the Group has taken all reasonably foreseeable measures, including strengthening its backup center, upgrading and duplicating various servers, introducing an authentication system for entering server rooms, and installing a system to monitor the use of its internal computer networks. However, if system outages or other failures occur due to destructive acts from outside the Group, human error within the Group, natural disasters, or other causes, business performance could be affected.」
The Group continues to disclose the risks of system failures and personal information leaks while describing measures including backups, server upgrades and redundancy, authentication, and monitoring. - FY2018RestatedAnnual report
「Regarding its computer network systems, the Group has taken all reasonably foreseeable measures, including strengthening its backup center, upgrading and duplicating various servers, introducing an authentication system for entering server rooms, and installing a system to monitor the use of its internal computer networks. However, if system outages or other failures occur due to destructive acts from outside the Group, human error within the Group, natural disasters, or other causes, business performance could be affected.」
The Group continues to explain the risks of system failures and measures including backups, redundancy, authentication, and monitoring. The risk of personal information leaks is also reiterated separately. - FY2016First statedAnnual report
「If users' personal information is leaked externally and misused by outside intruders, the Group's personnel, or service providers and other contractors, the Group could be held liable, its reputation could suffer, and business performance could be affected.」
The Group identifies system outages, human error, natural disasters, external intrusions, and personal information leaks as risks, and also describes measures including backups, server upgrades and redundancy, authentication, and monitoring.