Dependence on Information Systems and Suspension of Payment Operations Due to Malicious Attacks
First written in FY2020. 1 of 3 entries say "Mitigated", first in FY2021. Latest entry: FY2025.
The whole theme swung hardest in 2026: 17 of 84 companies on the "Worse" side.
3 other companies' latest entry also says "Other".
- FY2025Additional risk of compensation claims for fraudulent payments and remote remediation frameworkAnnual report
「If an event occurs in which a payment is completed through fraudulent means, merchants, credit card companies and others may seek compensation, which could affect the Group's business performance. To address these risks, the Group takes safeguards, responds promptly when fraud is detected, and has a framework that enables it to remotely make corrections to terminals as necessary.」
In addition to the existing risk of system outages, the company explicitly identifies the possibility of compensation claims relating to fraudulently completed payments and describes countermeasures involving safeguards, fraud detection and remote remediation. - FY2021MitigatedAnnual report
「The company also uses a fault-tolerant system designed to operate without interruption, secures backup data and conducts restoration tests as necessary.」
While continuing to disclose the risk of outages caused by system dependence, attacks and disasters, the company specifies countermeasures including an uninterrupted system, backups, restoration tests and regular meetings. - FY2020First statedAnnual report
「However, if an unforeseen disaster or other event exceeding expectations occurs, or if the company is subjected to a malicious attack, the system could suffer a serious disruption, potentially reducing system reliability, disrupting payment operations and affecting the Group's business performance.」
The company discloses system disruption caused by cyberattacks or disasters exceeding expectations as a risk against a backdrop of significant dependence on computer systems.