Leakage of Personal and Customer Information Assets
First written in FY2022. 1 of 3 entries say "Mitigated", first in FY2023. Latest entry: FY2025.
The whole theme swung hardest in 2026: 13 of 71 companies on the "Worse" side.
- FY2025RestatedAnnual report
「Accordingly, the group has established a personal information protection policy and an information security policy in accordance with the Act on the Protection of Personal Information and other applicable laws, and obtained ISO/IEC 27001:2013 (information security management) certification in February 2017. However, if important personal information or information assets were to be leaked externally for any reason, the group's financial condition and operating results could be affected by damage to its social credibility and the incurrence of liability for damages.」
The company continues to describe control measures based on its personal information protection policy, information security policy and ISO certification, as well as the risk of impacts in the event of a leak. - FY2023MitigatedAnnual report
「Accordingly, the group has established a personal information protection policy and an information security policy in accordance with the Act on the Protection of Personal Information and other applicable laws, and obtained ISO/IEC 27001:2013 (information security management) certification in February 2017. However, if important personal information or information assets were to be leaked externally for any reason, the group's financial condition and operating results could be affected by damage to its social credibility and the incurrence of liability for damages.」
The leakage risk remains, but the company identifies its personal information protection policy, information security policy and ISO certification as specific control measures. - FY2022First statedAnnual report
「However, if important personal information or information assets were to be leaked externally for any reason, the group's financial condition and operating results could be affected by damage to its social credibility and the incurrence of liability for damages.」
The company describes the leakage of personal and customer information assets as a risk to its reputation and liability exposure.