Leakage of Personal Information and Trade Secrets
First written in FY2016. 4 of 6 entries say "Advanced", first in FY2019. Latest entry: FY2026.
The whole theme swung hardest in 2026: 13 of 71 companies on the "Worse" side.
- FY2026AdvancedAnnual report
「To prevent new risks such as information leaks and copyright infringement, guidelines for the use of generative AI were prepared. A generative AI office and a generative AI risk consultation desk were also established to create a response framework.」
Measures to address the risk of personal information and trade secret leakage were expanded to include guidelines for generative AI use, a specialist office and a consultation desk. - FY2022AdvancedAnnual report
「In particular, to strengthen cybersecurity measures, the specialist organization responsible for cybersecurity conducts security reviews of information systems and their operation, while also enhancing measures to prevent security incidents, including third-party vulnerability assessments, monitoring for unauthorized access, responding to vulnerabilities and targeted phishing email drills.」
Measures were expanded beyond the existing ISMS, PDCA and training to include third-party vulnerability assessments, monitoring for unauthorized access and targeted phishing email drills. - FY2020AdvancedAnnual report
「On this basis, we are working to improve security awareness and capabilities by overhauling security policies, guidelines and other measures applied across the Group, enhancing internal training and strengthening monitoring.」
Following the unauthorized access to 7pay, measures are being expanded beyond the existing ISMS and PDCA rollout to strengthen group-wide policies, guidelines, training and monitoring. - FY2019AdvancedAnnual report
「In addition, we have established the information security standards to be achieved by the Group and are working to further strengthen information security by rolling out a PDCA cycle based on ISMS certification methods to group companies.」
In addition to ISMS certification at sites handling personal information, including omni7, a PDCA cycle based on the certification methods is being rolled out to group companies. - FY2018MitigatedAnnual report
「At sites handling customers’ personal information related to “omni7 (オムニ7),” we obtained certification under the international Information Security Management System (ISMS) standard (ISO 27001), and worked to strengthen information security and expand the certified sites as necessary.」
Measures to address the risk of information leakage were advanced through obtaining ISMS certification, expanding certified sites and rolling this out to group companies. - FY2016First statedAnnual report
「This information may be disclosed externally by mistake or through unauthorized acts. If information is disclosed externally, we may be liable to compensate victims and the Group's social credibility may be affected.」
The leakage of personal and credit information handled in the financial services and other businesses, as well as trade secrets, is identified as a risk.