Personal Information Breach
First written in FY2016. 6 of 9 entries say "Restated". Latest entry: FY2026.
The whole theme swung hardest in 2026: 15 of 80 companies on the "Worse" side.
- FY2026WorsenedAnnual report
「The Group handles large volumes of personal information, including sensitive information such as payroll data and My Number information. Although it is working to strengthen its information security framework, the possibility of information leaks resulting from unauthorized access, cyberattacks, internal misconduct, human error, deficiencies in the management of outsourcers or other causes cannot be ruled out.」
Regarding the risk of personal information leaks, the Group explicitly identifies the nature of its business, which involves handling large volumes of sensitive information such as payroll data and My Number information, as well as unauthorized access, internal misconduct, human error and inadequate management of outsourcers as possible causes. - FY2025RestatedAnnual report
「However, the risk of personal information leaks cannot be eliminated. If personal information concerning employees of a customer company were to be leaked, compensation costs for the customer company or its employees could arise, and transactions with existing and prospective customer companies could decline due to a loss of credibility, potentially affecting the Group’s performance.」
The explanation that the risk of personal information leaks remains continues despite obtaining the PrivacyMark and ISO/IEC 27001 certification. - FY2023RestatedAnnual report
「However, the risk of personal information leaks cannot be eliminated. If personal information concerning employees of a customer company were to be leaked, compensation costs for the customer company or its employees could arise, and transactions with existing and prospective customer companies could decline due to a loss of credibility, potentially affecting the Group’s performance.」
The explanation that the risk of personal information leaks remains continues despite obtaining the PrivacyMark and ISO/IEC 27001 certification. - FY2022ISO/IEC 27001 certification addedAnnual report
「In September 2021, the Company obtained certification for “ISO/IEC 27001 (MSA-IS-502) (certified units: Operations Department, Setup Department, Quality Control Department, Sales Department and Administration Department).” However, the risk of personal information leaks cannot be eliminated.」
Although an additional information management certification was obtained, the explanation that the risk of personal information leaks itself remains continues. - FY2020RestatedAnnual report
「However, the risk of personal information leaks cannot be eliminated. If personal information concerning employees of a customer company were to be leaked, compensation costs for the customer company or its employees could arise, and transactions with existing and prospective customer companies could decline due to a loss of credibility, potentially affecting the Group’s performance.」
The explanation that the risk of leaks remains continues despite strict personal information controls and the Group’s acquisition of the PrivacyMark. - FY2019RestatedAnnual report
「However, the risk of personal information leaks cannot be eliminated. If personal information concerning employees of a customer company were to be leaked, compensation costs for the customer company or its employees could arise, and transactions with existing and prospective customer companies could decline due to a loss of credibility, potentially affecting the Group’s performance.」
The explanation that the risk of leaks remains continues despite strict personal information controls and the Group’s acquisition of the PrivacyMark. - FY2018RestatedAnnual report
「However, the risk of personal information leaks cannot be eliminated. If personal information concerning employees of a customer company were to be leaked, compensation costs for the customer company or its employees could arise, and transactions with existing and prospective customer companies could decline due to a loss of credibility, potentially affecting the Group’s performance.」
The explanation that the risk of personal information leaks remains continues despite strict controls and the Group’s acquisition of the PrivacyMark. - FY2017RestatedAnnual report
「However, the risk of personal information leaks cannot be eliminated. If personal information concerning employees of a customer company were to be leaked, compensation costs for the customer company and its employees could arise, and transactions with existing and prospective customer companies could decline due to a loss of credibility, potentially affecting the Group’s performance.」
The possibility of personal information leaks and their potential impact through compensation costs, loss of credibility and reduced transactions continue to be identified. - FY2016First statedAnnual report
「However, the risk of personal information leaks cannot be eliminated. If personal information concerning employees of a customer company were to be leaked, compensation costs for the customer company and its employees could arise, and transactions with existing and prospective customer companies could decline due to a loss of credibility, potentially affecting the Group’s performance.」
Although the Group has obtained the PrivacyMark and implemented strict controls, it states that the possibility of a leak remains.