System Failures, Unauthorized Access and Data Loss
First written in FY2017. 5 of 8 entries say "Mitigated", first in FY2022. Latest entry: FY2026.
The whole theme swung hardest in 2026: 17 of 84 companies on the "Worse" side.
24 other companies' latest entry also says "Mitigated".
- FY2026MitigatedAnnual report
「CIS Controls score: 2.8 points or higher / Penetration tests and vulnerability assessments: 5 or more / Critical security incidents: 0 (Group-wide)」
Regarding measures to address system failures and unauthorized access, it discloses that penetration tests and vulnerability assessments were conducted 5 times and that there were 0 critical security incidents. - 2026-04-15MitigatedFinancial Results Presentation
「被害を未然に防ぐ 「先回り」の対策を徹底」
従来の防御・検知・復旧に加え、外部露出管理、開発工程のセキュリティチェック及び脅威情報の活用を含む予防的対策へ広げている。 - FY2025MitigatedAnnual report
「The company prepares improvement plans for issues identified through information security risk assessments, vulnerability assessments and penetration tests. It also strengthens measures, including the introduction of systems that help prevent unauthorized access and other incidents before they occur, and expands and accelerates the scope of anomaly detection, thereby working to strengthen security.」
In addition to information security policies and training, it specifies risk assessments, vulnerability assessments, penetration tests and expanded anomaly detection as countermeasures. - FY2024MitigatedAnnual report
「The company has established and implemented information security policies and related rules, prepared and distributed an information security handbook, and provided information security training to employees through e-learning. It has also conducted information security risk assessments and introduced EDR (Endpoint Detection and Response) and CASB (Cloud Access Security Broker), among other measures, to strengthen security.」
As measures to address the risks of system failures, unauthorized access and data loss, it has introduced policies, training, risk assessments, EDR and CASB. - FY2022MitigatedAnnual report
「During the past year, the Group had 0 incidents involving economic losses and 0 information leakage incidents. The company recognizes the need to continue strengthening and continuously improving security across the Group to prevent future incidents and information leakage.」
Regarding the information leakage incident disclosed previously, it discloses that there were 0 incidents involving economic losses and 0 information leakage incidents during the most recent 1-year period. - FY2021MaterialisedAnnual report
「During the past year, the Group had 0 incidents involving economic losses and 1 information leakage incident. The information leakage resulted from unauthorized access to backup files held by NetGalley, LLC of the United States, which oversees and operates the service in each country, including the NetGalley service that the company provides in Japan as an agent. Personal information of members in Japan and other countries, as well as information concerning some publishers, was leaked in December 2020.」
It discloses the fact that personal information of members and other data were leaked in December 2020 following unauthorized access to NetGalley's backup files. - FY2018RestatedAnnual report
「The Group has measures in place to prevent unauthorized access and systems to prevent errors by personnel. However, if an incident such as this occurs, it could directly cause losses to the Group and could also undermine its social standing, credibility and trust, potentially affecting its business performance.」
It continues to disclose the risks of system outages, unauthorized access, and data loss or leakage, along with measures to prevent unauthorized access and errors. - FY2017First statedAnnual report
「If a temporary increase in load, such as a sharp rise in access to the Company’s services, causes the Company’s or a telecommunications carrier’s servers to fail, or if hardware or software defects prevent information from being transmitted normally, the system may shut down and services may become unavailable.」
Identifies increased load, hardware and software defects, unauthorized intrusion, data loss and data leakage as risks that could disrupt services.