Cyberattack and Information Leakage Risk
First written in FY2022-Q1. 11 of 15 entries say "Restated". Latest entry: FY2026.
The whole theme swung hardest in 2024: 12 of 87 companies on the "Worse" side.
47 other companies' latest entry also says "Mitigated".
- FY2026MitigatedAnnual report
「We will also enhance information security measures, including the establishment of an IT-BCP and stronger log monitoring, across the Group, including affiliated companies.」
In response to the risks of cyberattacks and information leaks, the company has specified that it will strengthen its IT-BCP and log monitoring in addition to the previous measures to strengthen system security and its CSIRT. - FY2026-H1RestatedAnnual report
「During the current interim consolidated accounting period, there were no material changes in the occurrence of matters relating to the business or accounting situation described in this semiannual report that could have a significant impact on investors’ decisions, or in the matters described under “Business and Other Risks” in the annual securities report for the previous fiscal year.」
No material changes have been identified regarding cyberattack and information leakage risks. - FY2025MitigatedAnnual report
「As measures to address this risk, our group is strengthening system security and upgrading communications lines, hardware and cloud services, while also establishing information security policies and a code of conduct for ransomware, setting up a CSIRT, and working to strengthen its management framework by thoroughly implementing an organisational response to minimise damage when incidents occur.」
In addition to the existing policies, code of conduct, CSIRT and training, upgrades to system security, communications lines, hardware and cloud services are specified as countermeasures. - FY2025-H1RestatedAnnual report
「During the current interim consolidated accounting period, there were no material changes in the occurrence of matters relating to the business or accounting situation described in this semiannual report that could have a significant impact on investors’ decisions, or in the matters described under “Business and Other Risks” in the annual securities report for the previous fiscal year.」
No material changes have been identified regarding cyberattack and information leakage risks. - FY2024-Q3RestatedAnnual report
「During the current third-quarter consolidated cumulative period, there were no material changes in the occurrence of matters relating to the business or accounting situation described in this quarterly report that could have a significant impact on investors’ decisions, or in the matters described under “Business and Other Risks” in the annual securities report for the previous fiscal year.」
No material changes have been identified regarding cyberattack and information leakage risks. - FY2024-Q2RestatedAnnual report
「During the current second-quarter consolidated cumulative period, there were no material changes in the occurrence of matters relating to the business or accounting situation described in this quarterly report that could have a significant impact on investors’ decisions, or in the matters described under “Business and Other Risks” in the annual securities report for the previous fiscal year.」
No material changes have been identified regarding cyberattack and information leakage risks. - FY2024-Q1RestatedAnnual report
「During the current first-quarter consolidated cumulative period, there were no material changes in the occurrence of matters relating to the business or accounting situation described in this quarterly report that could have a significant impact on investors’ decisions, or in the matters described under “Business and Other Risks” in the annual securities report for the previous fiscal year.」
No material changes have been identified regarding cyberattack and information leakage risks. - FY2023MitigatedAnnual report
「We are working to strengthen our management framework by establishing information security policies and a code of conduct for ransomware, setting up a CSIRT, and thoroughly implementing an organisational response to minimise damage when an incident occurs.」
The establishment of a CSIRT and the organisational response to minimise damage when incidents occur are newly specified as measures to address cyberattack and information leakage risks. - FY2023-Q3RestatedAnnual report
「During the current third-quarter consolidated cumulative period, there were no material changes in the occurrence of matters relating to the business or accounting situation described in this quarterly report that could have a significant impact on investors’ decisions, or in the matters described under “Business and Other Risks” in the annual securities report for the previous fiscal year.」
No material changes have been identified regarding cyberattack and information leakage risks. - FY2023-Q2RestatedAnnual report
「During the current second-quarter consolidated cumulative period, there were no material changes in the occurrence of matters relating to the business or accounting situation described in this quarterly report that could have a significant impact on investors’ decisions, or in the matters described under “Business and Other Risks” in the annual securities report for the previous fiscal year.」
No material changes have been identified regarding cyberattack and information leakage risks. - FY2023-Q1RestatedAnnual report
「During the current first-quarter consolidated cumulative period, there were no material changes in the occurrence of matters relating to the business or accounting situation described in this quarterly report that could have a significant impact on investors’ decisions, or in the matters described under “Business and Other Risks” in the annual securities report for the previous fiscal year.」
No material changes have been identified regarding cyberattack and information leakage risks. - FY2022RestatedAnnual report
「As measures to address this risk, our group has established information security policies, strengthened its management framework, formulated a code of conduct for ransomware, provided information security training and targeted phishing email drills to all directors, officers and employees, and worked to raise security awareness.」
The cyberattack and information leakage risks and the related measures, including policies, the management framework, the ransomware code of conduct, training and targeted phishing email drills, are reiterated. - FY2022-Q3RestatedAnnual report
「During the current third-quarter consolidated accounting period, there were no material changes in the occurrence of matters relating to the business or accounting situation described in this quarterly report that could have a significant impact on investors’ decisions, or in the matters described under “Business and Other Risks” in the first-quarter report.」
No material changes have been identified regarding cyberattack and information leakage risks. - FY2022-Q2RestatedAnnual report
「During the current second-quarter consolidated accounting period, there were no material changes in the occurrence of matters relating to the business or accounting situation described in this quarterly report that could have a significant impact on investors’ decisions, or in the matters described under “Business and Other Risks” in the first-quarter report.」
No material changes have been identified regarding cyberattack and information leakage risks. - FY2022-Q1First statedAnnual report
「If targeted cyberattacks or other cyberattacks such as ransomware, unauthorized access or computer viruses cause this information to be leaked, or result in the destruction or falsification of important data or system outages, the Group could suffer a material impact on its performance through business interruptions, loss of social credibility and substantial costs such as damages paid to affected parties.」
The company identifies cyberattacks targeting customer information and its own technical information, unauthorized access and virus intrusions as risks that could result in business interruptions, loss of credibility and damages claims. Countermeasures include internal rules, a management framework, a code of conduct, training and targeted-attack email drills.