Unauthorized Use and Takeover of Customer Accounts
First written in FY2025. 1 of 2 entries say "Mitigated", first in FY2026. Latest entry: FY2026.
0 other companies' latest entry also says "Mitigated".
- FY2026MitigatedAnnual report
「The company is working to strengthen identity verification by introducing login and withdrawal authentication functions using passkeys and multifactor authentication.」
To address the risk of unauthorized use of customer accounts, the company introduced and strengthened passkeys and multifactor authentication, blocking of unauthorized connection sources, device verification, fraud detection and other measures. - FY2025First statedAnnual report
「In recent years, incidents in which customers' authentication credentials are illicitly obtained by third parties through phishing scams, malware and other means have been increasing, and account takeover damage has become more serious across the industry. If unauthorized logins, unauthorized withdrawals or similar incidents resulting from such methods occur at our company, there is a risk of economic loss and damage to corporate value due to compensation for damage to customer assets and loss of trust.」
For the first time, the company disclosed unauthorized acquisition of customer authentication credentials, unauthorized logins, unauthorized withdrawals and damage to customer assets as separate risks, and presented countermeasures including two-factor authentication, fraud detection and customer education.