Information Leakage Caused by Unauthorized Access and Computer Viruses
First written in FY2017. 2 of 7 entries say "Mitigated", first in FY2021. Latest entry: FY2025.
The whole theme swung hardest in 2026: 13 of 71 companies on the "Worse" side.
- FY2025MitigatedAnnual report
「The Menicon Group Information Security Policy has been established and thoroughly communicated, and the subsidiaries are also developing information security management rules equivalent to those of the Company. We also review the status of security measures annually. In preparation for a possible security incident, we have strengthened our response structure by establishing a CSIRT (Computer Security Incident Response Team), conduct CSIRT training, and maintain cyber insurance.」
In addition to the common Group policy and subsidiary rules, the response to information-leakage risks has been expanded through annual reviews of security measures, CSIRT training, and the introduction of cyber insurance. - FY2024Identification of information security and monitoring risks across Group companiesAnnual report
「The Group has numerous group companies in Japan and overseas, including subsidiaries and other entities acquired through business acquisitions and other means. If risk management does not function appropriately because adequate group governance does not extend to these group companies and other entities, or because monitoring and controls covering various risks, including system and security risks, are insufficient, this could affect the Group's business operations, financial position, and operating results.」
In addition to the existing risks of unauthorized access and information leaks, the disclosure identified the risks of inadequate governance, monitoring, and controls across the Group, including acquired subsidiaries. - FY2023RestatedAnnual report
「The Menicon Group Information Security Policy has been established and thoroughly communicated, and the subsidiaries are also developing information security management rules equivalent to those of the Company.」
Continuing to maintain information security policies and rules, including at consolidated subsidiaries. - FY2022RestatedAnnual report
「To reduce these risks, the Menicon Group Information Security Policy has been established and thoroughly communicated, and the subsidiaries are also developing information security management rules equivalent to those of the Company.」
Continuing to maintain a common Group information security policy and rules for subsidiaries. - FY2021MitigatedAnnual report
「To reduce these risks, the Menicon Group Information Security Policy has been established and thoroughly communicated, and the subsidiaries are also developing information security management rules equivalent to those of the Company.」
For the risks of unauthorized access and information leaks, the Group is implementing a common policy and equivalent rules at its subsidiaries. - FY2019MaterialisedAnnual report
「However, unauthorized access by a third party to an internet site operated by a consolidated subsidiary and the resulting damage have recently been confirmed.」
The disclosure states that unauthorized access and resulting damage by a third party were confirmed at an internet site operated by a consolidated subsidiary, rather than being merely assumed risks of unauthorized access and virus infection. - FY2017First statedAnnual report
「However, if information leaks occur as a result of unauthorized access using technologies beyond what was anticipated or unforeseeable computer virus infections, events could arise that significantly affect the social credibility of the Group, including claims for damages from customers and business partners.」
Disclosing the risks of unauthorized access, virus infections, and information leaks associated with computer management of products, sales, and personal information.