Risk of Personal Information Leaks, Unauthorized Access and System Disruptions
First written in FY2016. 16 of 25 entries say "Restated". Latest entry: 2026-06-19.
Ajinomoto Co. moved to the "Worse" side of this theme in 2024, 2 years before the typical company in this theme (2026).
The whole theme swung hardest in 2026: 32 of 107 companies on the "Worse" side.
35 other companies' latest entry also says "Mitigated".
- 2026-06-19MitigatedGovernance
「Along with establishing Group-wide BCP (Business Continuity Planning) and BCM (Business Continuity Management), we have also established systems and procedures for information systems, including those involving key vendors, and conduct training at least once a year to prepare for large-scale natural disasters and cyberattacks.」
Disclosed information security risk measures, including progress management by the Management Risk Committee, a reporting framework to the CEO, BCP and BCM involving key vendors, and training at least once a year. - FY2026WorsenedAnnual report
「Risks arising from the use of AI, including the unauthorised leakage of confidential information, the spread of false information, violations of laws and regulations and ethical issues resulting from inadequate AI governance, and incorrect management decisions.」
Information and digital risks were expanded beyond conventional cyberattacks, ransomware and impersonation using generative AI to include confidential information leaks, false information, inadequate governance and incorrect decisions arising from the use of AI itself. - 2026-05-19AdvancedGeneral Meetings of Shareholders
「We identified external cyberattacks, a global trade war, escalation of issues surrounding the Taiwan Strait, and major earthquakes, floods and other disasters in the Tokyo metropolitan area as risks requiring proactive action by management, and implemented countermeasures.」
Listed specific risk events identified for action by the Management Risk Committee, including external cyberattacks, and stated that countermeasures were implemented. - FY2025WorsenedAnnual report
「●Risk that cyberattacks may become increasingly sophisticated through the commercialisation and division of labour associated with generative AI technology and ransomware attacks, leading to large-scale system outages and the leakage of personal and confidential information ●Risk of financial losses from falling victim to impersonation fraud using generative AI」
The IT security risk was expanded to specifically include the commercialisation of generative AI and ransomware, system outages, confidential information leaks and impersonation fraud using generative AI. - FY2025-H1RestatedAnnual report
「No new business or other risks arose during the six months ended 30 June. There were also no material changes to the business and other risks described in the securities report for the previous fiscal year.」
The disclosure states that there were no new developments or significant changes regarding risks related to personal data breaches, unauthorized access and system outages. - FY2024WorsenedAnnual report
「●Risk that technological know-how and business trade secrets may leak to competitors, affecting technological and business competitiveness ●Risk that cyberattacks, including the misuse of AI technology and ransomware attacks, may become increasingly sophisticated ●Risk that personal information may be leaked, resulting in administrative sanctions and loss of stakeholder trust」
Information leakage, unauthorised access and system outage risks were organised as increasingly sophisticated IT security risks, including trade secrets, AI misuse, ransomware and personal information leaks. - FY2024-Q2RestatedAnnual report
「No new business or other risks arose during the cumulative second-quarter period. There were also no material changes to the business and other risks described in the securities report for the previous fiscal year.」
The disclosure states that there were no new developments or significant changes regarding risks related to personal data breaches, unauthorized access and system outages. - FY2024-Q1RestatedAnnual report
「There were no newly arising business or other risks during the first quarter of the current consolidated cumulative period. There were also no material changes to the business and other risks described in the securities report for the previous fiscal year.」
The disclosure states that there were no new developments or significant changes regarding risks related to personal data breaches, unauthorized access and system outages. - FY2023WorsenedAnnual report
「●Risk that strategies and critical confidential information may be leaked or lost due to inadequate knowledge management or rapid technological innovation, and that security may be weakened by becoming a target of cybercrime」
In addition to the existing risks of information leaks, unauthorized access and system outages, knowledge management, critical confidential information, cybercrime and the response to rapid technological innovation were specified as key risks. - FY2022-Q3RestatedAnnual report
「No new business or other risks arose during the cumulative third-quarter period. There were also no material changes to the business and other risks described in the securities report for the previous fiscal year.」
The disclosure states that there were no new developments or significant changes regarding risks related to personal data breaches, unauthorized access and system outages. - FY2022-Q2RestatedAnnual report
「No new business or other risks arose during the cumulative second-quarter period. There were also no material changes to the business and other risks described in the securities report for the previous fiscal year.」
The disclosure states that there were no new developments or significant changes regarding risks related to personal data breaches, unauthorized access and system outages. - FY2021-Q3RestatedAnnual report
「No new business or other risks arose during the cumulative third-quarter period. There were also no material changes to the business and other risks described in the securities report for the previous fiscal year.」
The disclosure states that there were no new developments or significant changes regarding risks related to personal data breaches, unauthorized access and system outages. - FY2021-Q2RestatedAnnual report
「No new business or other risks arose during the cumulative second-quarter period. There were also no material changes to the business and other risks described in the securities report for the previous fiscal year.」
The disclosure states that there were no new developments or significant changes regarding risks related to personal data breaches, unauthorized access and system outages. - FY2020MitigatedAnnual report
「With respect to information management, we established an IT Governance Policy and implemented initiatives to strengthen our information security framework.」
In response to risks including information leaks, unauthorized access and system outages, we established an IT Governance Policy and strengthened our information security framework. - FY2020-Q3RestatedAnnual report
「No new business or other risks arose during the cumulative third-quarter period. There were also no material changes to the business and other risks described in the securities report for the previous fiscal year.」
The disclosure states that there were no new developments or significant changes regarding risks related to personal data breaches, unauthorized access and system outages. - FY2020-Q2RestatedAnnual report
「No new business or other risks arose during the cumulative second-quarter period. There were also no material changes to the business and other risks described in the securities report for the previous fiscal year.」
The disclosure states that there were no new developments or significant changes regarding risks related to personal data breaches, unauthorized access and system outages. - FY2020-Q1RestatedAnnual report
「No new business or other risks arose during the cumulative first-quarter period. There were also no material changes to the business and other risks described in the securities report for the previous fiscal year.」
The disclosure states that there were no new developments or significant changes regarding risks related to personal data breaches, unauthorized access and system outages. - FY2019WorsenedAnnual report
「●Decline in competitiveness due to an inability to keep pace with digital technological innovation ●Decline in competitiveness due to a weak IT management structure」
In addition to information leaks, unauthorized access and system outages, delays in responding to digital technological innovation and weaknesses in the IT management structure were specifically identified as risks to competitiveness. - FY2019-Q1RestatedAnnual report
「There were no newly arising business or other risks during the cumulative consolidated period for the first quarter. Nor were there any material changes to the business or other risks described in the securities report for the previous fiscal year.」
The disclosure states that there were no new developments or significant changes regarding risks related to personal data breaches, unauthorized access and system outages. - FY2018-Q3RestatedAnnual report
「No new business or other risks arose during the nine months ended 31 December. There were also no material changes to the business and other risks described in the securities report for the previous fiscal year.」
The disclosure states that there were no significant changes regarding risks related to personal data breaches, unauthorized access and system outages. - FY2018-Q1RestatedAnnual report
「There were no newly arising business or other risks during the cumulative consolidated period for the first quarter. Nor were there any material changes to the business or other risks described in the securities report for the previous fiscal year.」
The disclosure states that there were no significant changes regarding risks related to personal data breaches, unauthorized access and system outages. - FY2017-Q3RestatedAnnual report
「There were no newly arising business or other risks during the cumulative consolidated period for the third quarter. Nor were there any material changes to the business or other risks described in the securities report for the previous fiscal year.」
The disclosure states that there were no significant changes regarding risks related to personal data breaches, unauthorized access and system outages. - FY2017-Q2RestatedAnnual report
「There were no newly arising business or other risks during the cumulative consolidated period for the second quarter. Nor were there any material changes to the business or other risks described in the securities report for the previous fiscal year.」
The disclosure states that there were no significant changes regarding risks related to personal data breaches, unauthorized access and system outages. - FY2017-Q1RestatedAnnual report
「There were no newly arising business or other risks during the cumulative consolidated period for the first quarter. Nor were there any material changes to the business or other risks described in the securities report for the previous fiscal year.」
The disclosure explicitly states that there were no significant changes in overall risks related to personal data breaches, unauthorized access and system outages. - FY2016First statedAnnual report
「However, there is a risk that information could be leaked or altered through currently unforeseeable unauthorized access or other incidents. There is also a risk that information systems could become unavailable for a certain period due to computer viruses or other causes.」
The information security policy, handbook and training were identified as countermeasures.