Risk of Claims for Damages and Reputational Deterioration Due to Personal-Information Leakage
First written in FY2016. 2 of 4 entries say "Restated". Latest entry: FY2019.
The whole theme swung hardest in 2026: 13 of 49 companies on the "Worse" side.
87 other companies' latest entry also says "Restated".
- FY2019RestatedAnnual report
「The Group restricts access to personal information, builds systems to prevent unauthorized intrusion, and establishes rules for information management, including its Information Security Policy. It also protects personal information by limiting the information obtained during card payments and minimizing the personal information collected to the necessary minimum. However, if personal information is leaked, this could affect the performance of the Group through claims for damages, damage to its reputation and other consequences.」
The company reaffirms the measures involving access restrictions, intrusion prevention, the establishment of rules and minimizing the information collected to the necessary minimum, as well as the risks in the event of a leak. - FY2018RestatedAnnual report
「To manage information, the Group restricts access to information, builds systems to prevent unauthorized intrusion, and establishes rules for information management, including its Information Security Policy. It also implements measures to protect personal information, such as limiting the information obtained during card payments and minimizing the personal information collected to the necessary minimum. However, if personal information is leaked, this could affect the performance of the Group through claims for damages, damage to its reputation and other consequences.」
The company reaffirms the measures involving access restrictions, intrusion prevention, the establishment of rules and minimizing the information collected to the necessary minimum, as well as the risks in the event of a leak. - FY2017MitigatedAnnual report
「To manage information, the Group restricts access to information, builds systems to prevent unauthorized intrusion, and establishes rules for information management, including its Information Security Policy. It also implements measures to protect personal information, such as limiting the information obtained during card payments and minimizing the personal information collected to the necessary minimum. However, if personal information is leaked, this could affect the performance of the Group through claims for damages, damage to its reputation and other consequences.」
In addition to the existing access restrictions, intrusion prevention and establishment of rules, the company describes limiting the information obtained during card payments and minimizing the personal information collected to the necessary minimum. - FY2016First statedAnnual report
「Because the Group obtains some user information in providing its services, it retains users' personal information. To manage this information, the Group restricts access to information, builds systems to prevent unauthorized intrusion, and establishes rules for information management, including its Information Security Policy. However, if personal information were to be leaked, this could affect the performance of the Group through claims for damages, damage to its reputation and other consequences.」
The company describes the risk of leaks associated with holding personal information, as well as management measures involving access restrictions, intrusion prevention and the establishment of rules.