Leakage of Personal and Confidential Information and Cyberattacks
First written in FY2016. 4 of 6 entries say "Worsened", first in FY2022. Latest entry: FY2026.
Nec moved to the "Worse" side of this theme in 2022, 3 years before the typical company in this theme (2025).
The whole theme swung hardest in 2026: 25 of 91 companies on the "Worse" side.
19 other companies' latest entry also says "Worsened".
- FY2026WorsenedAnnual report
「As the world becomes openly interconnected, cyberattacks targeting the NEC Group’s business environment are becoming increasingly sophisticated and complex, driven by the expanding use of AI technologies and cloud services.」
Cyber risks were assessed as key risks with an impact rating of 5, with AI and cloud use, the commercialization of attacks, and information management in relation to economic security explicitly identified. - FY2025WorsenedAnnual report
「As the world becomes openly interconnected and the use of AI expands, the NEC Group is exposed to a wide range of risks, including increasingly sophisticated and commercialized cyberattacks, heightened information leakage risks resulting from the use of cloud services, and information management challenges related to economic security.」
Cyber risks were specified as increasingly sophisticated and commercialized attacks, cloud use, the expansion of AI, and information management in relation to economic security, and were assessed as key risks with an impact rating of 5. - FY2023WorsenedAnnual report
「In particular, amid the increasing sophistication of cyberattacks and the expanding and growing complexity of the businesses and infrastructure targeted, threats such as unauthorized access and vulnerabilities in systems related to information management may not be identified and mitigated in a timely manner.」
The company explicitly identified the increasing sophistication of cyberattacks, the expansion and growing complexity of the infrastructure targeted, and delays in addressing vulnerabilities, thereby specifying the risks. - FY2022WorsenedAnnual report
「Moreover, the risk of unauthorized access and cyberattacks exists not only in the NEC Group’s products, services and systems, but also in the products, services and systems of customers, contractors, suppliers, business partners and other third parties.」
The scope of information leakage and cyberattack risks was explicitly expanded from the company’s own systems to third-party systems, including those of customers, contractors, suppliers and partners. - FY2017RestatedAnnual report
「If personal information or confidential information concerning customers or employees held by the NEC Group is leaked, or if the NEC Group suffers unauthorized access or a cyberattack and the information is misused, the NEC Group may incur legal liability and face sanctions by regulatory authorities, and its reputation and brand value may be impaired.」
The risks of personal and confidential information leaks and cyberattacks continue to be disclosed. - FY2016First statedAnnual report
「If personal information or confidential information concerning customers or employees held by the NEC Group is leaked, or if the NEC Group suffers unauthorized access or a cyberattack and the information is misused, the NEC Group may incur legal liability and face sanctions by regulatory authorities, and its reputation and brand value may be impaired.」
The protection of personal and confidential information, including My Number information, is identified as a key risk.