Leakage of Customers’ Personal and Skin Information
First written in FY2016. 1 of 3 entries say "Restated". Latest entry: FY2021.
The whole theme swung hardest in 2026: 13 of 49 companies on the "Worse" side.
22 other companies' latest entry also says "Mitigated".
- FY2021MitigatedAnnual report
「The servers storing personal information are subject to strict access restrictions and are physically isolated from the internal network. The Company is also working to improve information security management by strengthening its information systems and through other measures.」
The disclosure specifies employee training at least once a year, server access restrictions and physical isolation, and strengthened information systems as concrete measures against personal information leakage. - FY2017RestatedAnnual report
「In addition to taking the measures required of a personal information-handling business under the applicable law, including disclosing its personal information protection policy, the Company has established internal rules for handling personal information to prevent information leakage incidents. It is also strengthening its internal management structure, centered on employee training, and its information systems against unauthorized external access and other threats, thereby improving information security management and maintaining a robust incident-prevention structure to prevent information leakage.」
In response to the risk of personal information leakage, the Company continues to maintain access restrictions, network isolation, employee training and strengthened information systems. - FY2016First statedAnnual report
「However, if personal information held by the Company were to be leaked for any reason, this could result in a decline in sales due to damage to the Company's reputation, or costs such as damages and other compensation, and could affect the Company's financial condition, operating results and other aspects of its performance.」
The disclosure identifies the risk of information leakage arising from the handling of customers' purchase histories, skin-related information, living circumstances and health conditions, and cites access restrictions, physical isolation and employee training as countermeasures.