Personal Information Breach and Unauthorized Use Risk
First written in FY2016. 2 of 7 entries say "Restated". Latest entry: 2026-10-09.
The whole theme swung hardest in 2025: 7 of 60 companies on the "Worse" side.
19 other companies' latest entry also says "Mitigated".
- 2026-10-09MitigatedEarnings
「At AEON Bank, we introduced FIDO authentication from September 2026 to strengthen the security and improve the convenience of internet banking. This is intended to simplify authentication procedures and reduce the risk of unauthorized access and other threats.」
The introduction of FIDO authentication has been added as a measure against the risks of unauthorized use and information leakage. - FY2026MitigatedAnnual report
「On 23 July 2025, the Group entered into a partnership program agreement with Google Cloud Japan G.K. to strengthen measures against phishing fraud and began using its Web Risk service, which uses AI and machine learning to detect and block fraudulent websites in real time.」
The response to unauthorized use and information leaks has been made more specific through an agreement with Google Cloud and the real-time detection and blocking of fraudulent websites using AI and machine learning. - FY2025MaterialisedAnnual report
「With respect to transactions identified as unauthorized use resulting from illegal acts by third parties in certain offline transactions during the consolidated fiscal year, measures implemented have prevented further damage.」
Unauthorized use by third parties occurred in certain offline credit card transactions, and ¥9,945 million in bad debt-related expenses was recorded as an extraordinary loss. - FY2022RestatedAnnual report
「The Group has implemented personnel security measures, including education and training and self-checks for all employees; physical security measures at offices and in systems; and technical security measures, including access rights management.」
The Group continues its education and training, physical safeguards, access rights management, and oversight of contractors in relation to personal information protection. - FY2020MaterialisedAnnual report
「Finally, during the fiscal year, improper accounting was identified at the Group’s Philippine subsidiary. In addition, regarding the handling of personal information in joint recruitment activities for new employees, the Personal Information Protection Commission and the Tokyo Labour Bureau each provided guidance under Article 41 of the Act on the Protection of Personal Information, the Employment Security Act, and the guidelines under that Act.」
The Personal Information Protection Commission and the Tokyo Labour Bureau provided guidance regarding the handling of personal information in recruitment activities. - FY2017RestatedAnnual report
「Our Group is working to introduce systems with enhanced defenses against attacks and to improve employees’ information security awareness, while implementing measures to minimize damage in the event of an infection.」
The Group continues to describe measures for the secure management of personal information, employee education, technical safeguards, and oversight of contractors. - FY2016First statedAnnual report
「Our Group assigns a person responsible for the secure management of personal information to each department that handles such information. We also provide education and training and conduct self-checks for all employees, and implement physical and technical measures to ensure the secure management of personal information at offices and in systems.」
The Group has assigned responsible personnel and implemented education and training, self-checks, and physical and technical measures, while identifying the possibility of leaks and other incidents as a risk.