Risk of confidential and personal information leaks
First written in FY2016. 3 of 9 entries say "Worsened", first in FY2021. Latest entry: FY2025.
The whole theme swung hardest in 2026: 13 of 71 companies on the "Worse" side.
- FY2025WorsenedAnnual report
「• Cybersecurity breaches are recognized as a high-priority risk requiring continuous monitoring and response. • Aging IT applications may become a significant risk when they reach the end of their useful lives, causing system failures and operational disruption. • As digital technologies become more integrated into our products, comprehensive cybersecurity measures will be required across the entire value chain.」
The information security risk was made more specific to include cyber breaches, aging IT applications, the integration of digital technologies into products and measures across the entire value chain. - FY2024RestatedAnnual report
「We launched a company-wide initiative to implement measures, including technologies and processes that take the latest cybersecurity requirements into account, in order to protect products and digital services from cybersecurity breaches.」
The threat of cyberattacks remains a key risk, and company-wide measures covering products and digital services were launched. - FY2023WorsenedAnnual report
「However, cyberattacks targeting medical institutions, manufacturers and their supply chains are increasing rapidly worldwide, and attacks are becoming more sophisticated and organized. If an unforeseen event such as those described below occurs, our group’s performance and financial position may be affected by damage to corporate value, reduced business competitiveness, loss of public trust, compensation to affected stakeholders and sanctions or fines imposed by authorities in various countries.」
The information leakage risk was expanded to include sophisticated and organized cyberattacks targeting medical devices, medical institutions, manufacturing environments and supply chains. - FY2022MaterialisedAnnual report
「In the fiscal year ended March 2022, IT servers in certain areas of EMEA (Europe, the Middle East and Africa) and in the Americas (the United States, Canada and Latin America) were subject to unauthorized access. No evidence of loss, unauthorized use or leakage of our data was identified in the unauthorized access affecting EMEA, but some data may have been exfiltrated in the Americas, and we notified those who may have been affected.」
Regarding information security risk, IT servers in EMEA and the Americas were subject to unauthorized access, and some data may have been exfiltrated in the Americas. - FY2021WorsenedAnnual report
「Incidents could occur in which advanced cyberattacks cause patient information to be leaked in customers’ environments through the use or maintenance of our products, preventing customers from continuing their business, or cause medical examinations and treatment to be discontinued at medical institutions because our operations are interrupted or the provision of maintenance services is disrupted.」
The information leakage risk disclosure was made more specific and expanded to include leakage of patient information through medical devices and interruptions to medical care, in addition to leakage of internal information. - FY2020AdvancedAnnual report
「Our information security framework is structured around 3 information security functional areas: IT security, confidential information security and product security. In addition to initiatives in each area, we have established a security governance framework to implement and manage measures involving coordination across businesses, functions and regions.」
A global information security governance framework covering 3 areas—IT, confidential information and product security—was put into practice based on the CISO structure. - FY2019MitigatedAnnual report
「In addition to our previous initiatives, in October 2018 we established the Chief Information Security Officer (CISO) to centrally manage across the group the information security measures implemented to date by function and region, including IT security, product security and personal data protection, thereby strengthening information security governance.」
The CISO was established, strengthening the framework for integrated group-wide management of IT and product security and personal data protection measures. - FY2018MitigatedAnnual report
「With regard to the GDPR (EU General Data Protection Regulation), which came into force in May 2018, we have strengthened measures globally to protect the relevant personal information.」
As a response to the risk of information leakage, global measures to protect personal information were strengthened in line with the implementation of the GDPR. - FY2016First statedAnnual report
「Our group holds important confidential information, including technical information, as well as personal information relating to customers and other stakeholders. We have implemented various measures to prevent this information from being disclosed externally, including establishing internal rules, providing thorough employee training and strengthening security systems. However, if this information is leaked as a result of an unforeseen event, our group’s performance and financial position may be affected by damage to corporate value, loss of public trust and compensation to customers and other stakeholders affected by the leak.」
The risk of information leakage is disclosed despite measures based on internal rules, training and security systems.