Risks of Leakage or Alteration of Information Assets
First written in FY2016. 5 of 7 entries say "Mitigated", first in FY2020. Latest entry: FY2026.
ID Holdings moved to the "Worse" side of this theme in 2026, 1 year after the typical company in this theme (2025).
The whole theme swung hardest in 2026: 25 of 91 companies on the "Worse" side.
19 other companies' latest entry also says "Worsened".
- FY2026WorsenedAnnual report
「In recent years, in addition to the increasing sophistication and complexity of cyberattacks, the risk of information leakage caused by attacks targeting ransomware and supply chains, internal misconduct and human error has increased. A single incident could lead to a decline in social trust, liability for damages and an impact on business continuity.」
The disclosure explicitly identifies the increasing risk of information leakage from ransomware, supply-chain attacks, internal misconduct and human error, in addition to conventional risks such as unauthorised access. - FY2025MitigatedAnnual report
「Employees receive regular training in responding to cyberattacks and in revisions to rules and procedures required by laws and regulations, with the aim of further raising compliance awareness. The Company has also obtained and continues to maintain P Mark and ISO 27001 certifications.」
The disclosure covers a framework centred on the chief information management officer and CSIRT, regular exercises, training on rules and procedures, and the maintenance of P Mark and ISO 27001 certifications. - FY2024MitigatedAnnual report
「The Company established an Information Management Committee to discuss information management across organisational boundaries, thereby strengthening its information management framework. A specialist cyber security team, CSIRT, is leading efforts to strengthen various security measures and address incidents when they occur. Employees receive regular training in responding to cyberattacks and in revisions to rules and procedures required by laws and regulations, with the aim of further raising compliance awareness. The Company has also obtained and continues to maintain P Mark and ISO 27002 certifications.」
The disclosure covers a framework centred on the Information Management Committee and CSIRT, regular cyberattack response exercises, training on revisions to rules and procedures, and the maintenance of P Mark and ISO 27002 certifications. - FY2023MitigatedAnnual report
「The Company established an Information Management Committee to discuss information management across organisational boundaries, thereby strengthening its information management framework. A specialist cyber security team, CSIRT, is leading efforts to strengthen various security measures and address incidents when they occur.」
The Company established an Information Management Committee and strengthened its security measures and incident response framework centred on CSIRT. It also states that it has responded to the amended Act on the Protection of Personal Information. - FY2021MitigatedAnnual report
「In response to the risk of information leakage and other risks associated with telework, the Company formulated the Telework Security Guidelines in April 2020 and worked to ensure that all employees were thoroughly informed of their contents through study sessions.」
In response to the risk of information leakage associated with telework, the Company formulated guidelines and held study sessions for all employees. - FY2020MitigatedAnnual report
「In light of the increased risk of information leakage compared with normal working conditions as many employees shifted to telework due to the spread of COVID-19, the Company formulated the Telework (Work-from-Home) Security Guidelines on 9 April.」
The Company formulated security guidelines in response to the increased risk of information leakage associated with telework. - FY2016First statedAnnual report
「If the loss, tampering or leakage of customer or transaction information were to occur as a result of unauthorised access, a serious error or other event, the Group's reputation could be severely damaged, potentially affecting its operating performance and financial position.」
The disclosure describes measures including rules and procedures, responsible officers, committees, training and maintenance of certifications, but does not report any information leakage during the fiscal year.