Information security risks, including confidential information leaks and cyberattacks
First written in FY2020. 3 of 7 entries say "Materialised", first in 2026-04-27. Latest entry: 2026-07-01.
The whole theme swung hardest in 2026: 32 of 107 companies on the "Worse" side.
- 2026-07-01MitigatedGovernance
「In addition to technical and operational measures such as the introduction of cybersecurity solutions, security monitoring and measures against insider misconduct, we are working to appropriately manage and protect information assets through the company-wide rollout of a global security policy and through education, awareness-raising and training.」
The company described information security measures covering technical and operational controls, its global policy, and education and training. - FY2026MaterialisedAnnual report
「A former employee of our subsidiary, Tokyo Electron Taiwan Ltd., was indicted by Taiwan prosecutors in August 2025 and January 2026 for violations of the National Security Act and other laws in connection with involvement in a matter concerning a customer's confidential information.」
The confidential-information matter materialized in the indictment of a former employee of the Taiwan subsidiary, and the subsidiary was also ordered to pay a fine for violating its supervisory duties. - FY2025Clarifying the scope of risks to include suppliers and internal misconductAnnual report
「If information leakage or service outages occur as a result of cyberattacks against the Group or its suppliers, internal misconduct, or other causes, the Group's performance could be affected by damage to its competitiveness and technological advantage, suspension of operations including product manufacturing, reputational damage, damages claims, and other consequences.」
It describes the existing information leakage and cyberattack risks as also including attacks on suppliers, internal misconduct, service outages, and suspension of production activities. - FY2021MitigatedAnnual report
「The Group is strengthening its organization, including by establishing dedicated organizations centered on the Information Security Committee, and is building an information security framework aligned with global standards through measures including security assessments by external experts.」
In response to information leakage and cyberattack risks, it has established dedicated organizations, external assessments, anomaly-detection systems, and globally unified rules and response guidelines. - FY2020First statedAnnual report
「If such information is unintentionally disclosed, the Group's performance could be adversely affected by reputational damage, damages claims, and reduced product competitiveness. The Group also conducts its business using information systems and information networks. If disruptions occur due to cyberattacks, unauthorized access, natural disasters, power outages, equipment failures, human error or other causes, business operations could be delayed and its reputation could suffer.」
It has, for the first time, organized the leakage of confidential, customer and personal information, as well as business disruptions caused by cyberattacks and system failures, as standalone risks.