Risks of Information Breaches, Cyberattacks, and System Outages
First written in FY2020. 6 of 8 entries say "Restated". Latest entry: FY2026-H1.
Ulvac moved to the "Worse" side of this theme in 2026, the same year as the typical company in this theme.
The whole theme swung hardest in 2025: 11 of 53 companies on the "Worse" side.
13 other companies' latest entry also says "Materialised".
- FY2026-H1MaterialisedAnnual report
「On 10 January 2026, the company confirmed that various files on servers and computers in the internal systems of Pure Surface Technology, Ltd., its consolidated subsidiary in South Korea, had been encrypted. An investigation determined that the incident was caused by ransomware. The company has begun investigating the scope of the impact and taking steps toward recovery with the support of external specialists.」
The previously disclosed risks of information leakage, cyberattacks and system outages materialized in the form of a ransomware incident at a consolidated subsidiary in South Korea. The company began investigating and taking recovery measures with support from external specialists, while the impact on performance remained under review. - FY2023-Q3RestatedAnnual report
「During the cumulative consolidated period for the third quarter, no new business or other risks arose. There were also no significant changes to the business and other risks described in the securities report for the previous fiscal year.」
It was determined that there had been no material changes to the risks of information leakage, cyberattacks and system outages. - FY2023-Q2RestatedAnnual report
「During the cumulative consolidated period for the second quarter, no new business or other risks arose. There were also no significant changes to the business and other risks described in the securities report for the previous fiscal year.」
It was determined that there had been no material changes to the risks of information leakage, cyberattacks and system outages. - FY2022-Q3RestatedAnnual report
「During the cumulative consolidated period for the third quarter, no new business or other risks arose. There were also no significant changes to the business and other risks described in the securities report for the previous fiscal year.」
It was stated that there had been no material changes to the risks of information leakage, cyberattacks and system outages. - FY2021-Q3RestatedAnnual report
「During the cumulative consolidated period for the third quarter, no new business or other risks arose. There were also no significant changes to the business and other risks described in the securities report for the previous fiscal year.」
It was stated that there had been no material changes to the risks of information leakage, cyberattacks and system outages. - FY2021-Q2RestatedAnnual report
「During the cumulative consolidated period for the second quarter, no new business or other risks arose. There were also no significant changes to the business and other risks described in the securities report for the previous fiscal year.」
It was stated that there had been no material changes to the risks of information leakage, cyberattacks and system outages. - FY2021-Q1RestatedAnnual report
「During the first quarter of the current consolidated fiscal year, there were no newly arising business or other risks. In addition, there were no material changes to the business and other risks described in the annual securities report for the previous fiscal year.」
It was stated that there had been no material changes to the risks of information leakage, cyberattacks and system outages. - FY2020First statedAnnual report
「The Group holds important business information, as well as personal information and confidential information concerning business partners and others obtained in the course of its business. If this information is inadvertently leaked, the Group may lose customers, suffer a decline in social credibility and incur liability for damages. In addition, the unauthorized use of information by third parties due to theft or loss, cyberattacks and other unforeseen events may result in the destruction or alteration of important data, information breaches or leaks, and system outages.」
Information leakage, theft or loss, unauthorized use by third parties, cyberattacks, data destruction or alteration, and system outages were disclosed as separate major risks, with regular risk assessments, the development of internal rules and employee training identified as countermeasures.