Risk Management for Information Leaks, Cyberattacks and Acquired Subsidiaries
First written in FY2021. 2 of 4 entries say "Restated". Latest entry: FY2026.
Serendip Holdings moved to the "Worse" side of this theme in 2026, the same year as the typical company in this theme.
The whole theme swung hardest in 2025: 11 of 53 companies on the "Worse" side.
22 other companies' latest entry also says "Worsened".
- FY2026WorsenedAnnual report
「Furthermore, the expanded use of generative AI and cloud services in business is increasing the risks of leaks of confidential, personal, and technical information through prompts and file sharing, copyright and trade secret infringement, and the inclusion of data in training datasets. / Cyberattacks, including in the OT (Operational Technology) domain, and ransomware may cause production stoppages / logistics stoppages」
In addition to the existing risks of information leaks and management of acquired subsidiaries, the disclosure explicitly identifies risks of leaks and other incidents associated with generative AI and cloud use, as well as production and logistics stoppages caused by OT-related cyberattacks and ransomware. - FY2023RestatedAnnual report
「If appropriate group governance does not extend to subsidiaries and other entities acquired through business acquisitions, or if monitoring and controls over various risks, including systems and security risks, are inadequate, risk management may fail to function properly, potentially affecting the group's business operations, financial position, and business performance.」
The risks of cyberattacks and information leaks, as well as group governance and insufficient monitoring of acquired subsidiaries and insider trading, continue. - FY2022RestatedAnnual report
「The group continuously provides training and guidance to ensure compliance with confidentiality obligations. However, if confidential information is leaked externally for any reason, it may affect the group's business strategy and business performance by damaging its reputation.」
The risks of information leaks, cyberattacks, insufficient risk management at acquired subsidiaries, and confidential information management continue. - FY2021First statedAnnual report
「If an information leak occurs as a result of unauthorized access using technology beyond expectations or an unforeseeable computer virus infection, there is a risk of an event that could significantly affect the group's social credibility, including through claims for damages from customers and business partners.」
In addition to information management systems, insufficient group governance and monitoring of acquired subsidiaries is recognized as a risk.