Risk of operational shutdown and losses due to ransomware attacks
First written in FY2023. 1 of 3 entries say "Mitigated", first in FY2025. Latest entry: FY2025.
The whole theme swung hardest in 2026: 13 of 63 companies on the "Worse" side.
25 other companies' latest entry also says "Mitigated".
- FY2025MitigatedAnnual report
「As countermeasures, the company has obtained cyber risk insurance and established an offline backup system.」
In addition to its existing intrusion prevention, monitoring, access restriction and endpoint protection measures, the company has introduced cyber risk insurance and an offline backup system. The risks of delayed attack detection and expanded encryption-related damage continue to be disclosed. - FY2024Expanded cyber defenses and explicit disclosure of the risk of greater encryption-related damageAnnual report
「The company has introduced software to visualize internal security and monitor unauthorized activity from within the company to prevent intrusion, software to restrict access to websites that are inappropriate to view for business purposes, systems installed between the internet and the corporate LAN to prevent unauthorized external access, and software to protect computers from various cyberattacks. However, there is a risk that systems may actually be encrypted and that the time until the attack is detected may become prolonged, expanding the damage caused by encryption.」
The company has introduced systems for intrusion prevention, internal monitoring, access restrictions, prevention of unauthorized access and endpoint protection, and also has cyber risk insurance. At the same time, it has newly specified in more detail the risks of a prolonged period before attacks are detected and expanded damage caused by encryption. - FY2023First statedAnnual report
「If the company’s core systems were attacked by ransomware, system failures could lead to an operational shutdown and significantly affect business performance.」
The company has identified operational shutdowns and the impact on business performance from ransomware attacks on its core systems as new risks, and is addressing them by introducing systems for intrusion prevention, monitoring, access restrictions and prevention of unauthorized access, among other measures.