Risks of System Failures, Data Center Damage and Cyberattacks
First written in FY2019. 7 of 10 entries say "Mitigated", first in FY2021. Latest entry: FY2026.
The whole theme swung hardest in 2020: 2 of 15 companies on the "Worse" side.
4 other companies' latest entry also says "Advanced".
- FY2026AdvancedAnnual report
「The Bank Group is continuously working to improve its level of security in response to these developments. However, there is a risk that the measures implemented may fail to function effectively, disrupting business continuity through system outages or service suspensions, and a risk of internal information leaks.」
The Bank is expanding its cyber-resilience measures, including ransomware countermeasures, log monitoring, server recovery drills, TLPT, the recruitment and development of specialised personnel, and third-party assessments. - 2026-05-14MitigatedFinancial Results Presentation
「2025年度より、サイバーセキュリティ管理態勢強化のため統括責任者（CISO）を設置」
サイバーセキュリティ管理態勢について、統括責任者の設置という具体的な対応を示した。 - FY2026-H1MitigatedAnnual report
「Yotsuya network infrastructure renewal 984 7 Internal funds June 2025 March 2027 Fuchu Computer Center equipment upgrade work (uninterruptible power supply equipment) 1,130 — Internal funds October 2025 March 2027」
The Bank finalised a renewal plan for the network infrastructure and uninterruptible power supply equipment at its data centres, scheduled for completion in March 2027. - FY2025MaterialisedAnnual report
「On 30 September 2024, the company experienced delays in transfer processing and erroneous remittances. As recurrence-prevention measures, it improved processing speed by modifying programs and changing processing logic, and no similar incidents have occurred since.」
GMO Aozora Net Bank experienced actual delays in transfer processing and erroneous remittances and implemented recurrence-prevention measures, including program modifications and changes to processing logic. - FY2025-H1MitigatedAnnual report
「Our bank | Fuchu Annex | Tokyo, Fuchu | Upgrade | Upgrade work on the machine room at the Fuchu Computer Center | 2,585 | — | Internal funds | September 2024 | March 2027」
The Bank planned renewal work for the machine room at the Fuchu Computer Centre costing ¥2.585 billion, scheduled to begin in September 2024 and be completed in March 2027. This specifies measures to address failure and disaster risks through the renewal of data-centre equipment. - FY2024-Q2MitigatedAnnual report
「The Bank Fuchu Annex Fuchu, Tokyo Renewal Renewal of the extra-high-voltage receiving and substation equipment at the Fuchu Computer Centre ¥1.133 billion — Internal funds August 2023 March 2028」
The Bank newly finalised renewal work for the extra-high-voltage receiving and substation equipment at the Fuchu Computer Centre, costing ¥1.133 billion and scheduled to begin in August 2023 and be completed in March 2028. - FY2024-Q1MitigatedAnnual report
「Storage renewal ¥2.125 billion — Internal funds July 2023 July 2025 Renewal of the heating and cooling systems at the Fuchu Computer Centre ¥664 million — Internal funds September 2023 March 2024」
As measures addressing system failure and data-centre equipment risks, the Bank planned storage renewal costing ¥2.125 billion, scheduled to begin in July 2023 and be completed in July 2025, and renewal work on the heating and cooling systems at the Fuchu Computer Centre costing ¥664 million, scheduled to begin in September 2023 and be completed in March 2024. - FY2022-Q2MitigatedAnnual report
「The Bank Head office Tokyo Chiyoda-ku Newly established Enhancement of backup systems in preparation for damage to the main centre ¥1.071 billion 5 Internal funds April 2021 December 2023」
The Bank finalised a ¥1.071 billion plan to enhance backup systems in preparation for damage to the main centre, with completion scheduled for December 2023. - FY2021MitigatedAnnual report
「When modifying systems, the Bank works to conduct sufficient testing and is developing systems to ensure that it can provide customers with appropriate guidance and support in the event of a failure. It also implements multilayered technical measures against external attacks, including entry-point measures to prevent unauthorised intrusion, exit-point measures to prevent information leaks and recovery drills.」
The disclosure specifically describes testing when systems are modified, backups at remote locations, recovery drills, and entry- and exit-point measures against cyberattacks. - FY2019First statedAnnual report
「Human error, accidents and other incidents in the development, modification and maintenance of information systems may cause system failures, potentially resulting in information systems not operating properly or problems with maintaining internal controls and preparing accounting records and financial statements.」
The disclosure details the risk of business interruption caused by system failures, simultaneous damage to data centres and cyberattacks on internet connectivity as separate risk items.