Customer information leakage and unauthorized access risks

「Important information, including confidential and customer information, may be leaked from within or accessed unlawfully from outside through cyberattacks on computers or other means. If such an incident occurs, including at an outsourced service provider, it may affect the business, performance and financial condition of the Bank Group through related response costs, claims for damages against the Bank Group, administrative sanctions and damage to its social credibility. Regarding the case at a post office in which undisclosed financial information relating to savings and other products was used to solicit customers to visit the post office for insurance solicitation and the solicitation of investment trusts and government bonds without obtaining customers' prior consent, see “(12) Risks relating to the relationship with Japan Post Co., Ltd. ① Risks relating to sales activities conducted primarily through the post office network.”」

「The Bank holds information on a large number of individual and corporate customers. Customer information must be handled appropriately under the Banking Act, the Financial Instruments and Exchange Act and other laws. Personal information in particular is subject to stricter management requirements under the Act on the Protection of Personal Information.」