Information Security: Operational Disruption and Information Leakage Caused by Cyberattacks
First written in FY2020. 2 of 5 entries say "Materialised", first in FY2024-Q3. Latest entry: FY2025.
The whole theme swung hardest in 2024: 13 of 87 companies on the "Worse" side.
46 other companies' latest entry also says "Mitigated".
- FY2025MitigatedAnnual report
「Unauthorized access to some of the company’s servers was confirmed in January 2024. With guidance and advice from external experts and others, the company implemented enhanced security measures, including strengthening monitoring functions to prevent recurrence and reviewing its information systems operating structure. The company will continue working with external experts to further strengthen its operating and monitoring functions and information security.」
Following the unauthorized access incident, the company strengthened its monitoring functions and reviewed its information systems operating structure, and continues to implement additional enhancements with external experts. - FY2025-H1MaterialisedAnnual report
「System disruption response costs － 11,455」
In connection with the unauthorized access to some servers in January 2024, the company recorded ¥11.455 million in system disruption response costs as an extraordinary loss during the interim period, showing that the costs associated with an information security incident have been reflected in actual results. - FY2024Implementation of measures to prevent recurrence following unauthorized accessAnnual report
「Unauthorized access to some of the company’s servers was confirmed in January 2024. With guidance and advice from external experts and others, the company is implementing enhanced security measures, including strengthening monitoring functions to prevent recurrence and reviewing its information systems operating structure.」
Following confirmation of unauthorized access to some servers, the company has been strengthening monitoring functions and reviewing its information systems operating structure with advice from external experts. - FY2024-Q3MaterialisedAnnual report
「On 9 January 2024, some of the company’s servers were affected by a ransomware attack. The company has begun an investigation with the assistance of external experts and is working to protect and restore the systems. The impact of the incident on performance is still being assessed, and the company will promptly disclose any material impact on future performance if one is identified.」
A risk previously disclosed as a potential information security incident actually occurred on 9 January 2024, when some servers were affected by ransomware. The company is conducting an investigation and working on protection and recovery with external experts, while assessing the impact on performance. - FY2020First statedAnnual report
「If a major disruption occurs in the information systems due to a disaster, cyberattack, unauthorized access or other unforeseen event, critical business operations may be interrupted and confidential data may be leaked. This could affect the social credibility of the Group and its performance through significant costs incurred in responding to the incident and damage to its corporate image.」
For the first time, the company has disclosed risks relating to information systems, confidential information and personal information as separate items, citing the development of rules, employee training and enhanced security systems as countermeasures.