Information Leakage and Confidential Information Management Risks
First written in FY2021. 1 of 3 entries say "Mitigated", first in FY2024. Latest entry: FY2026.
The whole theme swung hardest in 2026: 13 of 71 companies on the "Worse" side.
- FY2026WorsenedAnnual report
「If information leakage or system failures were to occur due to unforeseen incidents caused by increasingly sophisticated cyberattacks, ransomware and other threats, this could have a material impact on the reputation of our group, result in costs such as compensation for damages and materially adversely affect our group's operating results and financial position.」
Increasingly sophisticated cyberattacks, ransomware and system failures have been explicitly added to the existing information leakage risk. - FY2024MitigatedAnnual report
「We manage this information in accordance with internal regulations, maintain our systems and introduce security software, and take measures through thorough employee training on information systems and other areas. However, if information were leaked due to an unforeseen incident, it could have a material impact on the reputation of our group, result in costs such as compensation for damages and materially adversely affect our group's operating results and financial position.」
Specific measures against information leakage risk are described, including internal regulations, system maintenance, security software and employee training. - FY2021First statedAnnual report
「Through various business activities, including its BtoC business, the Group handles substantial amounts of important confidential information, including personal data. It manages this information under internal rules and takes measures through thorough employee training on information systems and related matters. However, an unforeseen incident involving information leakage could seriously affect the Group’s reputation, result in costs such as damages and materially harm its results and financial condition.」
The Group identifies personal and confidential information handled in its BtoC and other businesses as a risk and describes management under internal rules and through employee training.