Operational Incidents, System Outages, and Cyberattacks
First written in FY2016. 2 of 8 entries say "Mitigated", first in FY2017. Latest entry: FY2026.
The Awa Bank moved to the "Worse" side of this theme in 2026, the same year as the typical company in this theme.
The whole theme swung hardest in 2026: 4 of 11 companies on the "Worse" side.
1 other company's latest entry also says "Materialised".
- FY2026MaterialisedAnnual report
「Regarding the information leak incident caused by unauthorized access that occurred in March this year, the bank takes the matter extremely seriously and will work to prevent recurrence as its highest-priority issue.」
The bank states that unauthorized access and information leaks, previously described as risks, actually occurred in an incident in March 2026. It also calls for a review of all information systems and the planned implementation of security measures. - 2026-05-28MaterialisedGeneral Meetings of Shareholders
「Regarding the information leakage incident caused by unauthorized access that occurred in March this year, we take the matter extremely seriously and will work to prevent recurrence as our highest priority.」
The Bank stated that an actual information leakage incident caused by unauthorized access had occurred, in contrast to its previous disclosure of risks such as system outages, information leaks and cyberattacks. - FY2024AdvancedAnnual report
「The bank will pursue planned and ongoing efforts to strengthen resilience, from preventing incidents to detecting, identifying and responding to incidents, rapidly restoring services and operations, and mitigating the impact on customers.」
In addition to the existing AWA-CSIRT and backup framework, the bank has expanded the scope of its measures to strengthen resilience, including detection, recovery and mitigation of customer impact. It has set exercises for AWA-CSIRT as a twice-yearly metric. - FY2022MitigatedAnnual report
「To prepare for disasters and other disruptions, the bank has established an Emergency Response Plan (Contingency Plan), developed a backup framework through redundancy of computer equipment and telecommunications lines, and established the Information Asset Management Basic Regulations (Security Policy) and Information Asset Security Standards (Security Standard) as rules for security measures to protect information assets. It is implementing various systems risk measures.」
In addition to the existing AWA-CSIRT, the bank has disclosed specific measures including an Emergency Response Plan, redundant equipment and telecommunications lines, and information asset management regulations. - FY2020RestatedAnnual report
「Establishment of AWA-CSIRT, a committee for responding to cyberattacks and other threats」
The bank continues to maintain its existing management framework, including AWA-CSIRT, for responding to system outages, information leaks, cyberattacks and other incidents. - FY2019RestatedAnnual report
「The bank has established AWA-CSIRT, a committee for responding to increasingly sophisticated and advanced cyberattacks, and is working to develop and strengthen its cybersecurity management framework.」
The bank continues to describe the development and strengthening of its cybersecurity management framework through AWA-CSIRT. - FY2017MitigatedAnnual report
「The bank has established AWA-CSIRT, a committee for responding to increasingly sophisticated and advanced cyberattacks, and is working to develop and strengthen its cybersecurity management framework.」
The bank disclosed the establishment of AWA-CSIRT, a committee for responding to cyberattacks, thereby providing specific details of its existing systems risk measures. - FY2016First statedAnnual report
「However, disasters, equipment or telecommunications failures, computer system outages, computer malfunctions, unauthorized computer use, cyberattacks and other events resulting in information leaks or tampering could adversely affect the operations, financial results and financial position of the bank group.」
The bank lists system outages, malfunctions, unauthorized use, cyberattacks, information leaks and tampering as operational risks.