Information System Failure and Unauthorized Access Risks
First written in FY2016. 3 of 7 entries say "Restated". Latest entry: FY2026.
The whole theme swung hardest in 2026: 18 of 84 companies on the "Worse" side.
- FY2026WorsenedAnnual report
「The Group's products include service functions that use networks. If a product becomes infected as a result of a cyberattack targeting a medical institution, testing operations may be halted and a third party may gain unauthorized access to personal information.」
In addition to internal systems and product security, the disclosure explicitly identifies product infection caused by attacks targeting medical institutions, the suspension of testing operations and unauthorized access to personal information. - FY2024WorsenedAnnual report
「The Group has also introduced various information systems for information transmission, support for core operations and approval procedures, seeking to improve operational efficiency, and manages and operates much of its business information through networks. If failures in these systems or networks, or cyberattacks, cause systems to stop operating or confidential information to leak, or if the incorrect use of generative AI and other technologies increasingly being adopted in recent years results in the provision of false information or infringement of third-party rights, the efficiency and reliability of the Group's operations may decline.」
In addition to the existing risks of system failures and cyberattacks, the disclosure explicitly identifies the provision of false information and infringement of third-party rights resulting from the misuse of generative AI. - FY2023WorsenedAnnual report
「The Group is also advancing cybersecurity measures for its products and services to provide customers and patients with reliable assurance. It has established a Product Security Policy and a Product Cybersecurity Committee, and set up a PSIRT (Product Security Incident Response Team). Through coordination with product security officers in each region, it is working on the design and manufacture of products based on the security policy and on post-market vulnerability management.」
In addition to the existing risk of information-system and network failures, the disclosure explicitly identifies cybersecurity for products and services themselves and post-market vulnerability management as risk areas. - FY2021RestatedAnnual report
「The Group has introduced various information systems for information transmission, support for core operations, approval procedures and other purposes, and much of its business information is processed over networks.」
The disclosure reiterates the risk of operational disruption caused by information-system and network failures, computer viruses and unauthorized access. - FY2018RestatedAnnual report
「Accordingly, to minimize the impact on operations of failures in information systems or network connections, computer viruses, unauthorized access to information systems from outside and other events,」
The disclosure reiterates the risk of operational disruption caused by information-system and network failures, viruses and unauthorized access. - FY2017RestatedAnnual report
「Accordingly, to minimize the impact on operations of failures in information systems or network connections, computer viruses, unauthorized access to information systems from outside and other events」
The disclosure reiterates the risk of operational disruption caused by information-system and network failures, viruses and unauthorized access. - FY2016First statedAnnual report
「To minimize the impact on operations of failures in information systems or network connections, computer viruses, unauthorized access to information systems from outside and other events」
Operational disruption and cyber risks associated with processing core operations and information transmission over networks.