Risk of business interruption due to cyberattacks and information leaks
First written in FY2020. 2 of 5 entries say "Materialised", first in FY2025. Latest entry: FY2026.
Alps Alpine moved to the "Worse" side of this theme in 2023, 3 years before the typical company in this theme (2026).
The whole theme swung hardest in 2024: 12 of 87 companies on the "Worse" side.
12 other companies' latest entry also says "Materialised".
- FY2026MaterialisedAnnual report
「During the fiscal year ending March 2026, an incident occurred involving unauthorized access to an external VPN system used by the Company, and the possibility that personal information was viewed by an external attacker cannot be ruled out.」
Cyberattack and information leak risks materialized as unauthorized access to an external VPN system and the possibility of personal information being viewed during the fiscal year ending March 2026. The Company stated that it would strengthen measures across its systems, including the VPN, review its rules and conduct training. - FY2025MaterialisedAnnual report
「In July 2024, an incident occurred in which a third party gained unauthorized access to a server of the Group.」
Cyberattack and information leak risks materialized as an incident involving unauthorized access to a server by a third party in July 2024. As follow-up measures, the Company is strengthening authentication, conducting vulnerability assessments and carrying out training. - FY2023WorsenedAnnual report
「Promoting the use of cloud systems provides significant convenience by advancing the digital transformation of business activities, but it also increases risks that the Group cannot manage directly.」
Regarding cyberattack and information leak risks, the Company added increased risks outside its direct control from using cloud systems and lost sales opportunities caused by delays in measures for CASE products. - FY2022MitigatedAnnual report
「The Company has established an ISMS (information security management system) framework and begun initiatives to continuously maintain and improve its effectiveness, including measures to strengthen information management across the Company and its entire supply chain, the use of security systems to detect and eliminate cyberattacks at an early stage, employee training to develop knowledge and awareness, and the development of incident response plans.」
The Company specified its response to cyberattack and information leak risks as an ISMS, information management across the entire supply chain, detection and elimination systems, training, and incident response plans. - FY2020First statedAnnual report
「As cyberattacks on information systems become more sophisticated and business fraud using IT becomes more elaborate, various incidents may occur, including the leakage, alteration or destruction of information created by the Company through its business activities or entrusted to it by customers, suppliers, other organizations and individuals, including employees, as well as the suspension of the Company’s information systems, rendering them unavailable.」
The Company newly disclosed cybersecurity and information management risks as a separate item, including information leaks, system outages, loss of competitiveness and lost sales opportunities.