Customer Information Leakage Risk
First written in FY2016. 3 of 5 entries say "Mitigated", first in FY2021. Latest entry: FY2026.
The whole theme swung hardest in 2026: 13 of 49 companies on the "Worse" side.
22 other companies' latest entry also says "Mitigated".
- FY2026MitigatedAnnual report
「We have established internal standards and manuals for the appropriate collection, use and management of personal information, and have developed management systems and an internal management structure to ensure that personal information is handled appropriately within the scope of its stated purpose of use across all business environments, from physical stores to online environments.」
The company has expanded its response to customer information leakage risks to cover the management infrastructure for physical stores and online environments, control of purposes of use, monitoring, education and compliance with overseas laws and regulations. - FY2022MitigatedAnnual report
「We have established internal standards and manuals for the appropriate collection and use of personal information, and based on these, have developed management systems and an internal management structure. We strictly manage personal information every day across all business environments, from physical stores to online environments.」
The company has expanded its response to customer information leakage risks to cover collection and use standards, management systems, education and monitoring across all business environments, from physical stores to online environments. - FY2021MitigatedAnnual report
「To limit risks, including preventing secondary damage, we have established systems enabling an adequate response through initial action and organizational coordination, including setting up a CSIRT (Computer Security Incident Response Team), promptly reporting incidents to government authorities and others, and sharing information with external specialist organizations. We are also working to further improve effectiveness, including by conducting regular training, and are strengthening the protection of information assets.」
To address the risk of customer information leakage, the company has established a system for protecting information assets that includes a CSIRT, information sharing with external parties, prompt reporting and regular training. - FY2017RestatedAnnual report
「We have established an internal management system and strictly manage this personal information, but if it is leaked externally as a result of a crime or other incident, costs may arise from compensation paid to individual customers, and sales may decline due to damage to the Group's social standing」
The company continues to address the risks of damages claims and reputational damage in the event of external leakage while maintaining a management system for customer information. - FY2016First statedAnnual report
「We have established an internal management system and strictly manage this personal information, but if it is leaked externally as a result of a crime or other incident, costs may arise from compensation paid to individual customers, and sales may decline due to damage to the Group's social standing」
Risks involving personal information held and processed in the department store, retail, card and financial, and information-processing services businesses.