Leakage of Customer and Personal Information
First written in FY2017. 2 of 7 entries say "Restated". Latest entry: FY2026.
The whole theme swung hardest in 2026: 13 of 71 companies on the "Worse" side.
- FY2026MitigatedAnnual report
「In addition, on 16 March 2026, the Company completed implementation of a function notifying users of logins to the corporate management screen and enhancements to the display of login histories. This completed all planned measures to prevent recurrence. No fact of unauthorised use or other misuse of information held by the Company, primarily personal information and press release information not yet announced, has been confirmed from the discovery of the unauthorised access and other incidents to date.」
The filing states that, after the possibility of leaks of customers’ information not yet released publicly and personal information actually arose, all planned measures to prevent recurrence, including reviewing WAF settings, migrating to the new administrator screen, and enhancing login notifications and history displays, were completed. No unauthorised use has been confirmed. - FY2025MaterialisedAnnual report
「The PR TIMES press release distribution service was subject to unauthorised access to its internal servers and cyberattacks by a third party from 24 April 2025, and defensive and other response measures were implemented from 25 April, when the incident was detected. As the Company investigated the impact together with external security specialists, it found that information held by the Company, primarily personal information and press release information not yet announced, may have been leaked.」
The leakage of customers’ information not yet released publicly and personal information, previously disclosed as a risk, actually occurred in the form of unauthorised access and cyberattacks by a third party, with the possibility of an information leak. - FY2024MitigatedAnnual report
「For information management, the Group has taken necessary measures, including systems investment and employee training, and as part of these measures obtained PrivacyMark certification in November 2009 and certification under the international ISO 27001 standard for information security management systems (ISMS) in January 2023.」
As measures against the risk of leaks of customers’ information not yet released publicly and personal information, the filing explicitly identifies systems investment, employee training, PrivacyMark certification, and the acquisition of ISO 27001 certification. - FY2022Specific details on the information covered and the causesAnnual report
「In the course of conducting its business, the Group has opportunities to handle customers’ information not yet released publicly and personal information. Although it has taken necessary measures for information management, including systems investment and employee training, if this information were to be leaked due to system vulnerabilities, computer viruses, unauthorised intrusion into computers from outside, errors by officers or employees, or other causes, it could affect the Group’s operating performance and social credibility.」
In addition to the customer and personal information previously covered, the filing explicitly identifies customers’ information not yet released publicly, and specifies system vulnerabilities, viruses, unauthorised intrusion, and errors by officers or employees as causes of leaks. - FY2019RestatedAnnual report
「In the course of conducting its business, the Group has opportunities to handle customer information and personal information. It has taken the necessary measures for information management and, as part of these measures, obtained PrivacyMark certification in November 2009.」
The filing reiterates the handling of customer and personal information, the acquisition of PrivacyMark certification, and the potential impact in the event of a leak. - FY2018RestatedAnnual report
「In the course of conducting its business, the Group has opportunities to handle customer information and personal information. It has taken the necessary measures for information management and, as part of these measures, obtained PrivacyMark certification in November 2009.」
The filing reiterates the handling of customer and personal information, the acquisition of PrivacyMark certification, and the potential impact in the event of a leak. - FY2017First statedAnnual report
「In the course of conducting its business, the Group has opportunities to handle customer information and personal information. It has taken the necessary measures for information management and, as part of these measures, obtained PrivacyMark certification in November 2009. However, if this information were to be leaked due to an unforeseen event, it could affect the Group’s operating performance and social credibility.」
The filing describes the Group’s handling of customer and personal information and the potential impact on operating performance and social credibility in the event of a leak. It identifies PrivacyMark certification as a countermeasure.