Risk of Cyberattacks, Information Leaks and System Outages
First written in FY2017. 4 of 6 entries say "Restated". Latest entry: FY2026.
The whole theme swung hardest in 2024: 14 of 86 companies on the "Worse" side.
63 other companies' latest entry also says "Restated".
- FY2026RestatedAnnual report
「External cyberattacks and unauthorised use by persons able to access the information systems used by the Group could result in the alteration or leakage of confidential information and other data, or the suspension of important operations and services.」
The risks of cyberattacks, unauthorised use, information leakage, business interruption, declining social trust and liability for damages continue to be identified. - FY2024WorsenedAnnual report
「In such cases, the Group's business, financial condition and operating results could be adversely affected by a decline in social trust and the potential incurrence of liability for damages to affected stakeholders, among other consequences.」
For information security risks, the disclosure now explicitly includes the potential for a decline in social trust and liability for damages, in addition to the previously identified risks of information alteration, leakage and business interruption. - FY2020RestatedAnnual report
「In using these information systems and network services, we have established policies and control systems and implemented security measures covering both hardware and software to protect confidential information held by the Group and prevent its leakage outside the Group. However, external cyberattacks such as those by hackers and computer viruses, unauthorised use or inadequate controls by persons able to access the information systems and information network services used by the Group, and infrastructure disruptions caused by natural disasters could result in the alteration or leakage of confidential information and other data, or the suspension of important operations and services.」
The Group continues to address the risks of cyberattacks, information leakage and system outages through policies and control systems and measures covering both hardware and software. - FY2019RestatedAnnual report
「In using these information systems and network services, we have established policies and control systems and implemented security measures covering both hardware and software to protect confidential information held by the Group and prevent its leakage outside the Group.」
Assuming risks such as cyberattacks, the Group continues to maintain policies and control systems and measures covering both hardware and software. - FY2018RestatedAnnual report
「However, external cyberattacks such as those by hackers and computer viruses, unauthorised use or inadequate controls by persons able to access the information systems and information network services used by the Group, and infrastructure disruptions caused by natural disasters could result in the alteration or leakage of confidential information and other data, or the suspension of important operations and services.」
Cyberattacks, unauthorised use, inadequate controls and infrastructure disruptions caused by natural disasters continue to be identified as information security risks. - FY2017First statedAnnual report
「However, external cyberattacks such as those by hackers and computer viruses, unauthorised use or inadequate controls by persons able to access the information systems and information network services used by the Group, and infrastructure disruptions caused by natural disasters could result in the alteration or leakage of confidential information and other data, or the suspension of important operations and services.」
Information security is described separately as a business risk, with cyberattacks, unauthorised use, inadequate controls and infrastructure disruptions caused by natural disasters identified as risk factors.