Risk of Personal Information Leaks and Information Security Incidents
First written in FY2017. 4 of 6 entries say "Restated". Latest entry: FY2024.
The whole theme swung hardest in 2026: 31 of 105 companies on the "Worse" side.
81 other companies' latest entry also says "Restated".
- FY2024RestatedAnnual report
「The Company is strengthening information security and, from the perspective of privacy protection, limits disclosure of user information to member stores and others providing services to the minimum necessary. It also blocks external access to the main servers handling personal information, provides information security training to permanent employees, part-time employees and other personnel, and focuses on enhancing its information management framework for compliance, including self-inspections within each responsible department and internal audits.」
The Company continues to implement personal information management measures involving access restrictions, information security training, self-inspections and internal audits. - FY2022RestatedAnnual report
「The Company is strengthening information security and, from the perspective of privacy protection, limits disclosure of user information to member stores and others providing services to the minimum necessary. It also blocks external access to the main servers handling personal information, provides information security training to permanent employees, part-time employees and other personnel, and focuses on enhancing its information management framework for compliance, including self-inspections within each responsible department and internal audits.」
The Company continues to implement personal information management measures involving access restrictions, information security training, self-inspections and internal audits. - FY2021RestatedAnnual report
「The Company is strengthening information security and, from the perspective of privacy protection, limits disclosure of user information to member stores and others providing services to the minimum necessary. It also blocks external access to the main servers handling personal information, provides information security training to permanent employees, part-time employees and other personnel, and focuses on enhancing its information management framework for compliance, including self-inspections within each responsible department and internal audits.」
The Company continues to implement personal information management measures including access restrictions, information security training, self-inspections and internal audits. - FY2019RestatedAnnual report
「The Company is strengthening information security and, from the perspective of privacy protection, limits disclosure of user information to member stores and others providing services to the minimum necessary. It also blocks external access to the main servers handling personal information, provides information security training to permanent employees, part-time employees and other personnel, and focuses on enhancing its information management framework for compliance, including self-inspections within each responsible department and internal audits.」
The Company continues to describe personal information management measures involving access restrictions, training, self-inspections and internal audits. - FY2018MitigatedAnnual report
「The Company is strengthening information security and, from the perspective of privacy protection, limits disclosure of user information to member stores and others providing services to the minimum necessary. It also blocks external access to the main servers handling personal information, provides information security training to permanent employees, part-time employees and other personnel, and focuses on enhancing its information management framework for compliance, including self-inspections within each responsible department and internal audits.」
Measures against personal information risks have been specified in detail, including access restrictions, training, self-inspections and internal audits. The Company also states that the same risks extend to subsidiaries, member stores and external contractors. - FY2017First statedAnnual report
「The Company handles large volumes of personal information relating to users of its sites.」
The Company describes the risks of system failures, human error and malicious information leaks associated with handling large volumes of personal information.