Leakage of Personal and Confidential Information
First written in FY2016. 5 of 10 entries say "Restated". Latest entry: FY2026.
The whole theme swung hardest in 2026: 13 of 72 companies on the "Worse" side.
- FY2026MaterialisedAnnual report
「If this information were to be leaked, we would face the risk of claims for damages from customers and reputational damage as an information services company.……From 9 to 11 October 2026, an incident occurred on Rakumachi, the real estate investment website operated by the Company, in which a third party used email addresses and passwords believed to have been obtained externally to log in fraudulently to member and partner accounts. The incident is presumed to have been a so-called credential-stuffing attack, and the personal information of up to 3,450 people was viewed and obtained.」
The disclosure now describes a specific incident in which the leakage of personal information went beyond the previously assumed risks, with fraudulent account logins resulting in information on up to 3,450 people being viewed and obtained. - FY2025WorsenedAnnual report
「The investigation confirmed the possibility that information held by the Company, including personal information, may have been leaked. The unauthorized access route has been blocked. The Company reported and consulted on the matter with the relevant police station and the Personal Information Protection Commission, and implemented recurrence-prevention measures, including enhanced monitoring, a review of authentication and access-rights management, and the institutionalization of vulnerability countermeasures, in addition to emergency measures.」
The disclosure shifted from a potential information-leakage risk to a specific incident involving possible leakage of information including personal information. The Company reported and consulted with the relevant authorities and implemented recurrence-prevention measures. - FY2024RestatedAnnual report
「We encrypt such information to prevent leakage and provide employees with guidance on handling personal information through training and education.」
Encryption of information and measures through training and education to prevent leakage, together with the risks of damages claims and reputational damage in the event of leakage, remain. - FY2023RestatedAnnual report
「We encrypt such information to prevent leakage and provide employees with guidance on handling personal information through training and education.」
Encryption of information and measures through training and education to prevent leakage, together with the risks of damages claims and reputational damage in the event of leakage, remain. - FY2022RestatedAnnual report
「We handle a large amount of important information, including various types of personal information and confidential information of business partners. We encrypt such information to prevent leakage and provide employees with guidance on handling personal information through training and education.」
Encryption of information and measures through training and education to prevent leakage, together with the risks of damages claims and reputational damage in the event of leakage, remain. - FY2021RestatedAnnual report
「We encrypt such information to prevent leakage and provide employees with guidance on handling personal information through training and education. However, if the relevant information is leaked, we may face the risk of damages claims from customers and the risk of reputational damage as an information services company.」
Encryption of information and measures through training and education to prevent leakage, together with the risks of damages claims and reputational damage in the event of leakage, remain. - FY2019Added the risks of breach of contract and tort.Annual report
「If a breach of contract or tort occurs in relation to the terms of master agreements or individual contracts entered into in our transactions, we may face the risk of damages claims or lawsuits from customers and the risk of reputational damage as an information services company, which may affect our operating results and financial position.」
Clearly identifies, in addition to the risk of leakage of personal and confidential information, the risks of breach of contract and tort relating to master agreements and individual contracts. - FY2018RestatedAnnual report
「To prevent the leakage of such information and mitigate the risk of damages claims to a certain extent, we have taken out insurance and provide employees with guidance on handling personal information through training and education.」
Insurance coverage and measures through training and education to address information leakage remain in place. - FY2017MitigatedAnnual report
「To prevent the leakage of such information and mitigate the risk of damages claims to a certain extent, we have taken out insurance and provide employees with guidance on handling personal information through training and education.」
Clearly identifies insurance coverage and training and education as measures against the risk of information leakage. - FY2016First statedAnnual report
「However, if the relevant information is leaked, we may face the risk of damages claims from customers and the risk of reputational damage as an information services company.」
Describes damages claims and reputational damage resulting from the leakage of personal information and confidential information of business partners.