Cyberattacks, Information Leaks and System Outages
First written in FY2016. 2 of 5 entries say "Materialised", first in FY2024. Latest entry: FY2025.
Sony Group moved to the "Worse" side of this theme in 2018, 8 years before the typical company in this theme (2026).
The whole theme swung hardest in 2024: 12 of 88 companies on the "Worse" side.
10 other companies' latest entry also says "Materialised".
- FY2025MaterialisedAnnual report
「In fiscal 2024, Sony was the victim of multiple cyberattacks. None of these incidents was assessed as serious, and none had a material impact on Sony's business strategy, results of operations or financial condition.」
Cyberattack risk also materialized as multiple incidents in fiscal 2024, but Sony stated that they had no material impact. - FY2024MaterialisedAnnual report
「In fiscal 2023, Sony was the victim of multiple cyberattacks. None of these incidents was assessed as serious, and none had a material impact on Sony's business strategy, results of operations or financial condition.」
Cyberattack risk materialized as multiple incidents in fiscal 2023, but Sony stated that they had no material impact. - FY2018WorsenedAnnual report
「As cyberattacks become increasingly sophisticated and automated and tools and resources become more readily available, there is no assurance that Sony's measures, security initiatives and controls to prevent or detect unauthorized intrusions, respond to unauthorized intrusions, restrict access to data, prevent the loss, destruction, alteration or leakage of business information, and mitigate the adverse effects of such attacks can ensure completely secure information security against unauthorized access.」
Sony described the increasing sophistication and automation of cyberattacks and the scope of information-security breaches affecting not only Sony but also external service providers and business partners. - FY2017RestatedAnnual report
「For example, in fiscal 2014, a cyberattack caused serious disruptions to the networks and IT infrastructure of Sony's Film business.」
Sony continued to cite past cyberattacks on its Film business and information-system disruptions as examples of information-security risks. - FY2016First statedAnnual report
「For example, in fiscal 2014, Sony's Film business was targeted in a cyberattack. As a result, business information, including information on Sony employees and other information, was accessed without authorization, stolen and leaked, and data was destroyed.」
Sony cited past cyberattacks on its Film business, including information theft and leakage and data destruction, and identified potential losses from a recurrence as a risk.