Leakage, alteration and unauthorized access involving personal information and purchase data
First written in FY2022. 2 of 5 entries say "Restated". Latest entry: FY2026.
True Data moved to the "Worse" side of this theme in 2026, the same year as the typical company in this theme.
The whole theme swung hardest in 2025: 11 of 53 companies on the "Worse" side.
22 other companies' latest entry also says "Worsened".
- FY2026WorsenedAnnual report
「It is difficult to completely eliminate the risk that information may be leaked or altered as a result of unexpected unauthorized access, cyberattacks or other events. There is also a risk that information systems may be forced to shut down due to computer virus infections or other causes. If such an event occurs, the company's performance may be materially affected by loss of public trust, liability for damages and interruption of business activities, among other consequences.」
Regarding information leakage risks, the company explicitly identifies cyberattacks and discloses the possibility of material effects including loss of public trust, liability for damages and business interruption. Measures including ISMS are disclosed separately, but the risk itself remains. - FY2025RestatedAnnual report
「To prevent the leakage and other loss of important information, including personal information, the company has established a management framework by preparing various rules and manuals, ensuring that employees are fully informed, obtaining the PrivacyMark certification and taking other measures. It has also implemented appropriate security measures for information management, including its systems. However, there is a risk that information could be leaked or altered as a result of currently unforeseeable unauthorized access or other events.」
While identifying measures including rules and manuals, employee training and the PrivacyMark certification, the company continues to disclose the risks of information leakage and alteration and unauthorized access. - FY2024RestatedAnnual report
「To prevent the leakage and other loss of important information, including personal information, the company has established a management framework by preparing various rules and manuals, ensuring that employees are fully informed, obtaining the PrivacyMark certification and taking other measures. It has also implemented appropriate security measures for information management, including its systems. However, there is a risk that information could be leaked or altered as a result of currently unforeseeable unauthorized access or other events.」
While the risk of information leakage and other incidents remains, the company continues to disclose measures including rules, employee training and the PrivacyMark certification. - FY2023MitigatedAnnual report
「To prevent the leakage and other loss of important information, including personal information, the company has established a management framework by preparing various rules and manuals, ensuring that employees are fully informed, obtaining the PrivacyMark certification and taking other measures. It has also implemented appropriate security measures for information management, including its systems.」
While the risks of leakage, alteration and unauthorized access involving personal information and purchase data remain, the company explicitly identifies measures including rules and manuals, employee training and the PrivacyMark certification. - FY2022First statedAnnual report
「Because the company operates businesses based on ID-POS and POS data, it holds the personal information of a very large number of consumers. There is a risk that information could be leaked or altered as a result of currently unforeseeable unauthorized access or other events. There is also a risk that information systems may become unavailable for a certain period due to computer virus infections or other causes.」
Given its possession of large volumes of consumer personal information, the company identifies as risks information leakage and alteration, unauthorized access, and the inability to use systems due to virus infections.