Customer Information Leakage Risk
First written in FY2016. 4 of 13 entries say "Restated". Latest entry: 2026-09-29.
The Imamura Securities moved to the "Worse" side of this theme in 2020, 6 years before the typical company in this theme (2026).
The whole theme swung hardest in 2026: 10 of 45 companies on the "Worse" side.
22 other companies' latest entry also says "Mitigated".
- 2026-09-29Mitigatedwww.nikkei.comなりすましメールやフィッシング詐欺の防止に向け、正規メールを識別しやすくする対策の導入が決定された。
- FY2026WorsenedAnnual report
「Technological innovations, including advances in AI technology and quantum computers that are likely to become practical in the near future, are increasing the likelihood that new attack methods will emerge. Although the company is taking the utmost care, it recognises that the risk is trending upward.」
In addition to the previously identified increase in cyberattacks, the company explicitly identifies the potential emergence of new attack methods resulting from technological innovations such as AI and quantum computers as an additional information security risk. - 2026-04-24AchievedEarnings
「The introduction of passkey authentication also improved the security of ｉＲｏｏｔ internet stock trading.」
The introduction of passkey authentication for iRoot was described as an initiative implemented during the fiscal year. - FY2026-H1MitigatedAnnual report
「In response to recent incidents involving unauthorised access to and fraudulent transactions through online brokerage accounts, the company introduced passkey authentication from the end of September this year for customers using iRoot internet stock trading. It will continue to enhance its services and strengthen security measures so that customers can trade with greater safety and peace of mind.」
Against the backdrop of unauthorised access to and fraudulent transactions through online brokerage accounts, the company introduced passkey authentication for iRoot from the end of September 2025. It provides specific details on security measures for customer information and online trading. - FY2024Explicit identification of the risk of core-system outages and personal-data managementAnnual report
「The company has established rules for the handling of personal data security and takes every possible precaution in its management. However, if a cyberattack caused a virus or malware infection, unauthorised access or other incident, or if information were leaked externally through an intentional or negligent act, the company's operating results and financial position could be affected by the resulting liability for damages, loss of social credibility and other consequences, including an outage of its core systems.」
In addition to the previously identified risk of information leaks, the company explicitly identifies personal-data security management and cyberattack-related core-system outages as events that could affect the company. - FY2023Specific information security measuresAnnual report
「The company has implemented measures against virus and malware infections, unauthorised access and other threats. However, as conditions change daily and it is difficult to avoid such threats completely, it has taken measures including conducting drills in preparation for incidents. It has also implemented technical measures against leaks caused intentionally or through negligence, and conducts information security training for all officers and employees to raise awareness.」
In relation to the previously identified risk of customer information leaks, the company has provided specific details on malware countermeasures, incident-response drills, technical measures and information security training for all officers and employees. - FY2022RestatedAnnual report
「No damage has been identified to date. However, cyberattacks continue to increase worldwide, and although the company is taking the utmost care, it recognises that the risk is trending upward.」
While stating that no damage has been identified, the company continues to describe the worldwide increase in cyberattacks and the upward trend in information security risk. - FY2021WorsenedAnnual report
「No damage has been identified to date. However, although the company is taking the utmost care while promoting telework as a preventive measure against the spread of COVID-19, cyberattacks continue to increase worldwide, and the company recognises that the risk is trending upward.」
While stating that no damage has been identified, the company continues to recognise that cyberattacks are increasing worldwide amid telework and that information security risk is trending upward. - FY2020WorsenedAnnual report
「No damage has been identified to date. However, although the company is taking the utmost care while promoting telework as a preventive measure against the spread of COVID-19, cyberattacks continue to increase worldwide, and the company recognises that the risk is trending upward.」
While stating that no damage has been identified, the company cites the worldwide increase in cyberattacks amid the promotion of telework and explicitly states that information security risk is trending upward. - FY2019RestatedAnnual report
「The company has established internal rules for managing customer information and takes every possible precaution in its management. However, if information were to be leaked externally due to computer virus infection, unauthorised access or other causes, or through intentional or negligent acts, the company's operating results and financial position could be affected by the resulting liability for damages, loss of social credibility and other consequences.」
While maintaining rules for managing customer information, the company reiterates the risks of liability for damages and loss of credibility resulting from information leaks. - FY2018RestatedAnnual report
「The company has established internal rules for managing customer information and takes every possible precaution in its management. However, if information were to be leaked externally due to computer virus infection, unauthorised access or other causes, or through intentional or negligent acts, the company's operating results and financial position could be affected by the resulting liability for damages, loss of social credibility and other consequences.」
While maintaining rules for managing customer information, the company reiterates the risks of liability for damages and loss of credibility resulting from information leaks. - FY2017RestatedAnnual report
「The company has established internal rules for managing customer information and takes every possible precaution in its management. However, if information were to be leaked externally due to computer virus infection, unauthorised access or other causes, or through intentional or negligent acts, the company's operating results and financial position could be affected by the resulting liability for damages, loss of social credibility and other consequences.」
The company reiterates the risk of customer information leaks and the controls provided under its internal rules. - FY2016First statedAnnual report
「If information were to be leaked externally due to computer virus infection, unauthorised access or other causes, or through intentional or negligent acts, the company's operating results and financial position could be affected by the resulting liability for damages, loss of social credibility and other consequences.」
Although the company has established rules for managing customer information, it describes the potential impact of information leaks.