Cyberattacks and information system disruptions
First written in FY2021. 3 of 5 entries say "Mitigated", first in FY2022. Latest entry: FY2026.
The whole theme swung hardest in 2024: 13 of 87 companies on the "Worse" side.
48 other companies' latest entry also says "Mitigated".
- FY2026MitigatedAnnual report
「The Group is working to avoid and mitigate information security risks through both hardware and operational measures. These include establishing an information security infrastructure through network perimeter defense, regular data backups, vulnerability detection for devices and the use of monitoring services, promoting information security management through risk identification and consideration of response methods by the Risk Management Committee and Information Security Subcommittee, providing security training to employees, and cooperating with specialist security companies.」
As a response following the unauthorized access incident, the company continues to implement measures covering both hardware and operations, including monitoring services, employee training and cooperation with specialist security companies. - 2026-06-02RestatedGeneral Meetings of Shareholders
「情報管理やサイバーセキュリティリスク等への対応として、「情報管理基本規程」「情報セキュリティマネジメント規程」「情報セキュリティインシデント対応規程」等を定めるとともに、「リスクマネジメント委員会」の下部組織として「情報セキュリティ部会」を設置し、情報セキュリティ全般に関する管理体制の強化を進めております。」
情報セキュリティ規程および情報セキュリティ部会による対応を継続して記載している。 - FY2023MitigatedAnnual report
「The Group is working to avoid and mitigate information security risks through both hardware and operational measures. These include establishing an information security infrastructure through network perimeter defense, regular data backups, vulnerability detection for devices and the use of monitoring services, promoting information security management through risk identification and consideration of response methods by the Risk Management Committee and Information Security Subcommittee, and providing security training to employees.」
As measures following the unauthorized access incident, the company added and explicitly identified monitoring services, vulnerability detection, the Information Security Subcommittee and employee training, expanding its response on both the hardware and operational fronts. - FY2022MitigatedAnnual report
「The Group is developing its security infrastructure through measures such as defending network boundaries, regularly backing up data, and detecting equipment vulnerabilities. Through the Information Security Subcommittee established under the Risk Management Committee, it is also advancing information security management, including identifying risks and considering response methods, and working to avoid and reduce information security risks through both equipment enhancements and operational improvements.」
Following the unauthorized access incident in February 2021, the company is developing specific measures including perimeter defense, backups, vulnerability detection and an information security subcommittee. - FY2021MaterialisedAnnual report
「Following an incident of unauthorized external access to the Company's servers in February 2021, the Company is once again working to strengthen its information systems and information security functions.」
In addition to disclosures on the risks of information system failures and cyberattacks, the Company disclosed the actual occurrence of an unauthorized external access incident in February 2021.