Information Leaks, Cyberattacks and Information System Failures
First written in FY2022. 3 of 7 entries say "Mitigated", first in FY2023. Latest entry: FY2026.
Oiles moved to the "Worse" side of this theme in 2024, 2 years before the typical company in this theme (2026).
The whole theme swung hardest in 2025: 11 of 53 companies on the "Worse" side.
18 other companies' latest entry also says "Mitigated".
- FY2026MitigatedAnnual report
「The Group is strengthening its security framework through measures including network redundancy, backups of important data, storage at multiple data centres and the introduction of incident detection systems. It is also promoting comprehensive cybersecurity measures, including ongoing security education and training for all officers and employees.」
Following the unauthorised access incident, the Company has strengthened measures including an incident detection system, network redundancy, backups, multiple data centres and education for all officers and employees. - 2026-05-12MitigatedEarnings
「This insurance proceeds relate to the system failure caused by the unauthorized access attack that occurred on 7 June 2024.」
Insurance proceeds were recorded in the current fiscal year in relation to a system failure in a prior fiscal year. - FY2025MaterialisedAnnual report
「System failure response costs － *5 ¥76 million」
For the system failure associated with the unauthorised access attack on 7 June 2024, the Company recognised ¥76 million in extraordinary loss for costs related to investigating the cause and restoring the systems. - FY2025-H1MaterialisedAnnual report
「System failure response costs － *2 ¥74 million」
For the system failure associated with the unauthorised access attack on 7 June 2024, the Company recognised ¥74 million in extraordinary loss for costs related to investigating the cause and restoring the systems. - FY2024MaterialisedAnnual report
「On 7 June 2024, the Company confirmed that its servers had been subjected to an unauthorised access attack by a third party. The Company has disconnected its network to prevent the damage from spreading and is conducting an investigation into the cause of the unauthorised access and recovery work concurrently with cybersecurity specialists.」
The information security risk materialised as an unauthorised access attack on the Company’s servers by a third party, and the Company is conducting network disconnection, a cause investigation and recovery work. - FY2023MitigatedAnnual report
「To minimise these impacts, the Group has established systems that facilitate recovery by making its networks redundant and backing up and storing important data at multiple data centres.」
In response to the risks of information leaks, cyberattacks and system failures, the Company specifies ISO 27001, network redundancy, backups and storage at multiple data centres. - FY2022First statedAnnual report
「In addition to the risks arising from leaks of confidential and personal information, the Group’s business, performance and financial position may be adversely affected if its information systems suffer major disruptions caused by unauthorised access resulting from cyberattacks, natural disasters, accidents, computer viruses or other factors.」
The Company lists leaks of confidential and personal information, unauthorised access and information system failures as new business risks.