Leakage or Unauthorized Use of Personal or Confidential Information
First written in FY2016. 10 of 17 entries say "Restated". Latest entry: 2026-10-21.
Recruit Holdings moved to the "Worse" side of this theme in 2018, 8 years before the typical company in this theme (2026).
The whole theme swung hardest in 2025: 7 of 60 companies on the "Worse" side.
7 other companies' latest entry also says "Materialised".
- 2026-10-21Materialisedfinance.yahoo.co.jp
「The company announced on the 21st that it had learned that information on users and business partners may have been leaked externally through unauthorized access to "カーセンサーnet," its used-car information website, and "C-MATCH," its business support service for used-car dealerships.」
The possibility that personal information had been leaked externally was confirmed, and an actual incident occurred involving up to 3,709,551 records. - FY2022WorsenedAnnual report
「The Group has designated data security and data privacy as top risks for the Group, classifies the data it holds according to its importance, and establishes the necessary frameworks and measures based on its businesses, the laws and regulations applicable in each country and region, and the characteristics of the information assets requiring protection.」
Personal and confidential information risks are positioned as top Group risks, with data classification, vulnerability assessments, unauthorized access detection and compliance with regulations in each country expressly identified as matters subject to company-wide management. - FY2021WorsenedAnnual report
「The Company has designated data security and data privacy as top risks for the Group. It classifies the data it holds according to its importance and establishes the necessary frameworks and measures based on the nature of its businesses, the laws and regulations applicable in each country and region, and the characteristics of the information assets requiring protection.」
The risk of leakage of personal and confidential information is explicitly identified as a top Group risk, and the disclosure has been enhanced to explain the establishment of management frameworks tailored to each country and region and the characteristics of the information assets. - FY2020-Q3MaterialisedAnnual report
「Subsequently, on 4 December of the same year, Recruit Co., Ltd. and Recruit Career Co., Ltd. received additional recommendations and guidance from the Personal Information Protection Commission, and on 11 December from the Director-General of the Tokyo Labour Bureau, concerning the above matter.」
Regarding the personal information risks surrounding Rikunabi DMP Follow, additional recommendations and guidance were received from the Personal Information Protection Commission and the Tokyo Labour Bureau in December 2019. - FY2020-Q2MaterialisedAnnual report
「It was determined that personal data had been provided to clients without obtaining consent for the provision of personal data to third parties from 7,983 users, in violation of Article 23, Paragraph 1 of the Act.」
The personal information risk materialized. Regarding Rikunabi DMP Follow, the Personal Information Protection Commission determined that personal data had been provided to third parties, including the 7,983 individuals whose consent had not been obtained, and issued recommendations and guidance. - FY2020-Q1RestatedAnnual report
「During the first quarter, there were no material changes in matters described in the quarterly report concerning the business and financial condition that could materially affect investors’ decisions, nor in the risks described under “Business and Other Risks” in the securities report for the previous fiscal year.」
The disclosure states that there have been no material changes to the risks of leakage or unauthorized use of personal and confidential information. - FY2019RestatedAnnual report
「In operating its businesses, the Group holds large amounts of personal and confidential information belonging to clients, users and other parties concerned.」
The risks of leakage or unauthorized use of personal and confidential information, liability for damages, administrative sanctions and loss of trust are disclosed again. The costs of complying with overseas personal information regulations are also described. - FY2019-Q3RestatedAnnual report
「During the nine months ended the third quarter, there were no material changes in matters described in the quarterly report concerning the business and financial condition that could materially affect investors’ decisions, nor in the risks described under “Business and Other Risks” in the securities report for the previous fiscal year.」
The disclosure states that there have been no material changes to the risks of leakage or unauthorized use of personal and confidential information. - FY2018WorsenedAnnual report
「The Act on the Protection of Personal Information applies to the Group's handling of personal information in Japan. In other countries, the applicable national laws concerning personal information apply, including the European Union's General Data Protection Regulation, which came into force in May 2018. These laws and regulations may differ by jurisdiction, potentially increasing the costs of compliance and business operations.」
Additional disclosure was made regarding overseas laws and regulations, including the EU General Data Protection Regulation that came into force in May 2018, and the possibility of increased compliance and business operating costs in relation to personal information risks. - FY2018-Q3RestatedAnnual report
「During the nine months ended the third quarter, there were no material changes in matters described in the quarterly report concerning the business and financial condition that could materially affect investors’ decisions, nor in the risks described under “Business and Other Risks” in the securities report for the previous fiscal year.」
The disclosure states that there have been no material changes to the risks of leakage or unauthorized use of personal and confidential information. - FY2018-Q2RestatedAnnual report
「During the six months ended the second quarter, there were no material changes in matters described in the quarterly report concerning the business and financial condition that could materially affect investors’ decisions, nor in the risks described under “Business and Other Risks” in the securities report for the previous fiscal year.」
The disclosure states that there have been no material changes to the risks of leakage or unauthorized use of personal and confidential information. - FY2018-Q1RestatedAnnual report
「During the first quarter of the current consolidated cumulative period, there were no occurrences of matters that could materially affect investors’ investment decisions among the matters relating to the business and financial position described in this quarterly report, nor were there any material changes to the “Business and Other Risks” described in the annual securities report for the previous fiscal year.」
The disclosure states that there have been no material changes to the risks of leakage or unauthorized use of personal and confidential information. - FY2017RestatedAnnual report
「There is no guarantee that the Group's measures to protect personal and confidential information and its appropriate management measures will function perfectly. If personal or confidential information held by the Group relating to clients, users or other parties concerned is leaked externally or used without authorization as a result of security breaches by third parties, hacking, intentional or negligent acts by employees or other causes, the Group may be liable for damages to customers and others and may be subject to business improvement orders or other measures by the authorities, which may adversely affect the Group's business, performance and social reputation.」
The risks of liability for damages, administrative sanctions and loss of trust associated with the leakage or unauthorized use of personal and confidential information are disclosed again. - FY2017-Q3RestatedAnnual report
「If personal or confidential information held by the Group relating to clients, users or other parties concerned is leaked externally or used without authorization as a result of security breaches by third parties, hacking, intentional or negligent acts by employees or other causes, the Group may be liable for damages to customers and others and may be subject to business improvement orders or other measures by the authorities.」
The risks of liability for damages, administrative sanctions and impacts on the business and trust associated with the leakage or unauthorized use of personal and confidential information are disclosed again. - FY2017-Q2RestatedAnnual report
「There is no guarantee that the Group's measures to protect personal and confidential information and its appropriate management measures will function perfectly. If personal or confidential information held by the Group relating to clients, users or other parties concerned is leaked externally or used without authorization as a result of security breaches by third parties, hacking, intentional or negligent acts by employees or other causes, the Group may be liable for damages to customers and others and may be subject to business improvement orders or other measures by the authorities.」
The risks of liability for damages, administrative sanctions and loss of trust associated with the leakage or unauthorized use of personal and confidential information are disclosed again. - FY2017-Q1RestatedAnnual report
「During the first quarter of the current consolidated cumulative period, there were no occurrences of matters that could materially affect investors’ investment decisions among the matters relating to the business and financial position described in this quarterly report, nor were there any material changes to the “Business and Other Risks” described in the annual securities report for the previous fiscal year.」
The disclosure states that there have been no material changes to the risks of leakage or unauthorized use of personal and confidential information. - FY2016First statedAnnual report
「In operating its businesses, the Group holds large amounts of personal and confidential information belonging to clients, users and other parties concerned.」
The disclosure describes liability for damages, administrative sanctions and impacts on the business, performance and social reputation in the event of information leaks or other incidents.