Risk of Unauthorized Access and Personal Information Leakage
First written in FY2016. 6 of 14 entries say "Restated". Latest entry: 2026-10-15.
Money Forward moved to the "Worse" side of this theme in 2026, the same year as the typical company in this theme.
The whole theme swung hardest in 2025: 4 of 19 companies on the "Worse" side.
3 other companies' latest entry also says "Materialised".
- FY2026-H1MaterialisedAnnual report
「Losses related to unauthorised access 59,219 Provision for losses related to unauthorised access 28,730」
Losses related to responding to unauthorised access of ¥59.219 million and an expense for the provision for such losses of ¥28.730 million were recorded, meaning that an event associated with the previously identified security risk actually occurred. - FY2025RestatedAnnual report
「The Group CISO provides monthly activity reports to the Representative Director and Group CTO, and reports are made to the Board of Directors once each quarter and as needed.」
The information security management framework involving the Group CISO, encryption, third-party assessments and monitoring remains in place. - FY2024-Q2RestatedAnnual report
「During the six-month cumulative period, there were no new business or other risks, nor any material changes to the business or other risks described in the securities report for the previous fiscal year.」
The disclosure broadly states that there have been no material changes concerning the risk of unauthorised access and personal information leakage. - FY2023-Q3RestatedAnnual report
「During the nine-month cumulative period, there were no new business or other risks, nor any material changes to the business or other risks described in the securities report for the previous fiscal year.」
The disclosure broadly states that there have been no material changes concerning the risk of unauthorised access and personal information leakage. - FY2022MitigatedAnnual report
「In March 2022, we established the “Personal Data Statement” and declared our principles concerning the handling of information relating to individuals, including personal information and personal data that can identify individuals, identifier information such as cookie information, IP addresses and device identification IDs, as well as location information and internet usage log information such as browsing histories.」
A Personal Data Statement concerning the handling of personal information and log information was established, specifying the information management policy. - FY2021MitigatedAnnual report
「For systems providing services and internal information systems, our group seeks to prevent unauthorised external access through measures such as development reviews, firewall installation and third-party assessments by external security assessment firms. We have also strengthened our monitoring framework after implementing appropriate security measures, including encrypting all important personal data, such as deposit and withdrawal histories, and encrypting all data transmissions.」
Security measures, including development reviews, third-party assessments, encryption and monitoring, continue and have been strengthened. - FY2020-Q2RestatedAnnual report
「During the six-month period ended [the current second quarter], there were no newly arising business or other risks, nor any material changes to the business and other risks described in the Annual Securities Report for the prior fiscal year.」
It is stated that there have been no material changes concerning the risk of unauthorised access and personal information leakage. - FY2017MitigatedAnnual report
「In addition, external attacks can come through multiple routes, not only via the internet but also through attacks routed via internal devices by means such as malicious bots. We are reducing these risks through various measures, including installing antivirus software on employee devices and isolating, at the network level, dedicated environments for maintenance work involving personal information.」
The disclosed controls include encryption, firewalls, third-party assessments, endpoint measures, network segregation, and measures such as TRUSTe, ISO/IEC 27001 and the PrivacyMark. - FY2017-Q2RestatedAnnual report
「During the first six months of the current consolidated fiscal year, there were no new business or other risks, nor any material changes to the business and other risks described in the securities report for the previous fiscal year.」
It is stated that there have been no material changes concerning the risk of unauthorised access and personal information leakage. - FY2017-Q1RestatedAnnual report
「During the first quarter of the current fiscal year, there were no new business or other risks, nor any material changes to the business or other risks described in the securities report for the previous fiscal year.」
It is stated that there have been no material changes concerning the risk of unauthorised access and personal information leakage. - FY2016First statedAnnual report
「It cannot be ruled out that unauthorised access to the systems may occur, resulting in the deletion or unauthorised acquisition of important data, including the personal and account information of registered members.」
While security measures, monitoring and external assessments are in place, the possibility of information leakage is disclosed as a risk.