Risk of Personal Information Leakage Involving Card Members
First written in FY2017. 3 of 4 entries say "Worsened", first in FY2022. Latest entry: FY2026.
Retail Partners moved to the "Worse" side of this theme in 2022, 4 years before the typical company in this theme (2026).
The whole theme swung hardest in 2026: 13 of 49 companies on the "Worse" side.
6 other companies' latest entry also says "Worsened".
- FY2026WorsenedAnnual report
「Regulations governing businesses that handle personal information have been steadily strengthened, including the full enforcement of the amended Act on the Protection of Personal Information in April 2022 and the expansion of the scope of mandatory information-leakage reports following the April 2024 amendment to the enforcement regulations. In January 2026, the authorities also published a policy for institutional reforms including the introduction of an administrative surcharge system and stronger protection for biometric information and minors, and legal requirements are expected to become more stringent.」
In addition to the expanded obligation to report information leaks, the disclosure newly identifies the January 2026 policy for institutional reforms and the resulting increase in legal requirements for personal information management. - FY2023WorsenedAnnual report
「Under the amended Act on the Protection of Personal Information, the duties required of businesses handling personal information have been strengthened and expanded, while penalties for corporations violating corrective orders and other requirements have been increased.」
While handling cardholder and other information as well as information on many customers, the Group specifically identifies the strengthened duties and penalties under the amended law and the impact of leakage caused by cyberattacks and unauthorized access as risks. - FY2022WorsenedAnnual report
「Certain Group operating companies hold cardholders’ personal information. In addition, the Group has operating companies engaged in real estate, insurance agency services and product order processing, which handle the personal information of many customers.」
The disclosure expands the scope from cardholder information to the personal information of many customers relating to real estate, insurance and order processing, and describes leakage risks including cyberattacks and unauthorized access. - FY2017First statedAnnual report
「Certain Group operating companies hold cardholders’ personal information. The Company and these operating companies have established personal information protection committees and are promoting organization-wide initiatives to protect personal information. However, information leakage may occur in the future as a result of the loss of personal information, criminal activity or other causes.」
The disclosure describes the establishment of personal information protection committees and organization-wide measures at operating companies holding cardholder information, and indicates the possibility of information leakage.