Customer Information Breaches, Information System Failures and Natural Disasters
First written in FY2017. 1 of 5 entries say "Worsened", first in FY2018. Latest entry: FY2022.
The whole theme swung hardest in 2026: 31 of 105 companies on the "Worse" side.
34 other companies' latest entry also says "Mitigated".
- FY2022MitigatedAnnual report
「The group also conducts information security training once every quarter to raise security awareness among all officers and employees, temporary staff and outsourced personnel.」
Specific measures addressing information leaks and cyber risks were outlined, including an information security committee led by the CISO, ISMS certification, compliance with internal rules, and training. - FY2022Reclassified as a key risk.Annual report
「The group’s officers and employees, offices and facilities are concentrated in the Tokyo metropolitan area. A direct earthquake in the Tokyo metropolitan area, an eruption of Mount Fuji, flooding caused by typhoons or storm surges, or similar events could result in the loss of critical information assets, insufficient personnel able to work and the collapse of infrastructure, making it impossible to resume business operations promptly.」
The risk to business continuity from natural disasters was classified as a particularly important risk, and measures including remote-location backups, an emergency response headquarters, a BCP and online business infrastructure were disclosed. - FY2020RestatedAnnual report
「Considering the impact of cyberattacks and natural disasters such as earthquakes on systems, the group recognizes that the likelihood of these risks materializing is relatively high and continues to implement measures including stronger security and backup systems, and internal education and training.」
Information system failures and security are explicitly identified as key risks, and countermeasures continue to be implemented. - FY2018WorsenedAnnual report
「As computer networks and information systems play an increasingly important role, the construction of information systems and establishment of security measures have become essential to maintaining business operations. At the same time, the likelihood of risks arising from system outages caused by failures or computer viruses, and information leaks caused by network intrusions, is increasing.」
It is explicitly stated that the likelihood of information system outages, viruses, network intrusions and information leaks is increasing. Data loss caused by natural disasters and fires continues to be disclosed. - FY2017First statedAnnual report
「Information may be leaked through unauthorized external access to the group’s computers, errors by group officers and employees or outsourced service providers, or unforeseen events. If such an incident occurs, it may have a significant impact on the group’s social credibility and affect performance and financial condition, including response costs.」
The disclosure covers leakage of important information, such as customers’ financial results, due to unauthorized access or errors, as well as business interruption caused by system failures, viruses, natural disasters and fires.