Risk of Impacts on Business Continuity and Corporate Value from Cyberattacks and Information System Failures
First written in FY2023. 1 of 3 entries say "Mitigated", first in FY2024. Latest entry: FY2026.
Kadoya Sesame Mills moved to the "Worse" side of this theme in 2026, 1 year after the typical company in this theme (2025).
The whole theme swung hardest in 2020: 2 of 8 companies on the "Worse" side.
5 other companies' latest entry also says "Worsened".
- FY2026WorsenedAnnual report
「However, cyberattack methods have become increasingly sophisticated and advanced in recent years. If a third party gains unauthorized access, launches a ransomware attack or causes a system failure, including involving systems for external services, logistics and core operations, the Group's business results and financial condition may be affected through information leaks, business disruptions and responses to business partners and customers.」
In addition to existing cyber risks, the Company provided more specific details on ransomware, attacks on logistics and core operating systems, and the possibility of business disruptions. - FY2024MitigatedAnnual report
「“Continuous improvement of relevant rules and response measures” … “Thorough security education” … “Strengthening security systems” … As a supplementary measure against this risk, we have taken out cyber insurance to transfer the risk.」
In response to the risks of cyberattacks and information system failures, the Company disclosed continuous improvement of its rules, regular education and training, network defenses, authentication and antivirus measures, strengthened monitoring systems, and cyber insurance as countermeasures. - FY2023First statedAnnual report
「If a cyberattack on the Group causes serious information system or communications infrastructure failures of an unforeseeable magnitude, the Group may face difficulties continuing its business and expanding its operations. In addition, if a security incident such as a leak of confidential information occurs as a result of a computer virus infection or unauthorized access, the Group's corporate value may be significantly impaired.」
Cyberattacks, system failures, virus infections, unauthorized access and leaks of confidential information were explicitly identified for the first time as independent business and other risks. The Company also disclosed integrated measures covering rules, organizational training and network defenses.