Business Interruption and Information Leaks Caused by Cyberattacks and System Failures
First written in FY2022. 2 of 6 entries say "Materialised", first in FY2025-H1. Latest entry: 2026-05-08.
Zacros moved to the "Worse" side of this theme in 2023, 3 years before the typical company in this theme (2026).
The whole theme swung hardest in 2020: 2 of 8 companies on the "Worse" side.
6 other companies' latest entry also says "Mitigated".
- 2026-05-08MitigatedEarnings presentation
「The impact of the production stoppage caused by ransomware in the previous fiscal year has been eliminated.」
The analysis of changes in operating profit indicated that the impact of the ransomware-related production stoppage in the previous fiscal year had been eliminated. - FY2025MaterialisedAnnual report
「The Company itself was subject to a ransomware attack in September 2024, affecting production activities and other operations, demonstrating that the impact of cyberattacks has become a reality.」
The risk of cyberattacks was explicitly described in the business and other risks section as having materialised through the September 2024 ransomware attack and its impact on production activities. - FY2025-H1MaterialisedAnnual report
「Some servers supporting the production control systems and core systems used by the Company were affected by ransomware. As a result, the Company recorded ¥239 million in losses from production stoppages and ¥100 million in system failure response costs as non-operating expenses. The systems have now been restored, but at the time, some products experienced production delays and disruptions to shipping operations, resulting in delayed deliveries. Depending on future negotiations, this could affect the Company's future financial position and operating results. However, because it is difficult to reasonably estimate the amount of the impact, it has not been reflected in the interim consolidated financial statements.」
The cyberattack risk materialised as a ransomware incident, resulting in ¥239 million in production stoppage losses, ¥100 million in system failure response costs, and delays in production and shipments. - FY2024RestatedAnnual report
「Meanwhile, cyberattacks are becoming increasingly sophisticated and are rising sharply.」
Continued to recognise the increasing sophistication and sharp rise in cyberattacks as a risk and described responses including disruption recovery, incident detection, and training and awareness-building. - FY2023WorsenedAnnual report
「Cyberattacks are becoming increasingly sophisticated and are rising sharply. If the Group's information systems are affected by cyberattacks, power outages, natural disasters, failures of system equipment, or other events, resulting in business interruptions or leaks of confidential information, this could affect the Group's business performance.」
The increasing sophistication and sharp rise in cyberattacks were explicitly identified, indicating heightened awareness of information security risks. - FY2022First statedAnnual report
「If the Group's information systems are affected by cyberattacks, power outages, natural disasters, failures of system equipment, or other events, resulting in business interruptions or leaks of confidential information, this could affect the Group's business performance.」
Against the backdrop of the increasing importance of information systems accompanying digital transformation, disclosed for the first time the risks of business interruption and confidential information leaks caused by cyberattacks and other events as a standalone item.