Leakage of Customers' and Unit Owners' Personal Information
First written in FY2016. 3 of 8 entries say "Mitigated", first in FY2017. Latest entry: FY2025.
The whole theme swung hardest in 2026: 32 of 106 companies on the "Worse" side.
- FY2025RestatedAnnual report
「If the Company's systems cannot be used normally because of cyberattacks, unauthorized access or other factors, or if personal information is leaked, the Group's operating activities and business processing could be delayed, and reputational damage, associated declines in sales and damages claims could affect the Group's results of operations and financial position.」
In addition to personal-information leakage, information-security risks including system unavailability and business-process delays caused by cyberattacks or unauthorized access, together with controls and cyber insurance, have been reconfirmed. - FY2024ReframedAnnual report
「If the Company's systems cannot be used normally because of cyberattacks, unauthorized access or other factors, or if personal information is leaked, the Group's operating activities and business processing could be delayed, and reputational damage, associated declines in sales and damages claims could affect the Group's results of operations and financial position.」
The risk of personal-information leakage has been expanded to include information-security risks such as system unavailability and business-process delays caused by cyberattacks or unauthorized access, and cyber insurance coverage is also described. - FY2022MitigatedAnnual report
「In its IT systems, the Group has strengthened the storage of personal-information files, continuously monitors its internal network and detects abnormalities, and controls access based on appropriate authorization. It is also strengthening information management across the board, including the handling of information other than personal information.」
Measures to prevent leakage through secure storage of personal-information files, continuous network monitoring and anomaly detection, and access management have been reconfirmed. - FY2020MitigatedAnnual report
「In its IT systems, the Group has strengthened the storage of personal-information files, continuously monitors its internal network and detects abnormalities, and controls access based on appropriate authorization. It is also strengthening information management across the board, including the handling of information other than personal information.」
In addition to the existing regulations and training, continuous internal-network monitoring, anomaly detection and access controls are described, providing specific measures to manage the risk of personal-information leakage. - FY2019RestatedAnnual report
「However, if personal information were to be leaked externally due to an unforeseen event, the Group could suffer a loss of sales from reputational damage or incur costs from damages claims, which could affect the Group's performance.」
The risks of reputational damage, declining sales and damages-related costs resulting from personal-information leakage have been reconfirmed together with the described controls. - FY2018RestatedAnnual report
「The Group has established rules governing the handling of personal information, including basic policies, regulations and detailed rules, and has developed the necessary systems. In its IT systems, it has strengthened the storage of personal-information files, introduced monitoring software for office automation systems, restricted access privileges, and strengthened information management across the board, including the handling of information other than personal information. However, if personal information were to be leaked externally due to an unforeseen event, the Group could suffer a loss of sales from reputational damage or incur costs from damages claims, which could affect the Group's performance.」
While the risk of personal-information leakage remains, controls including establishing regulations, strengthening file storage, and using monitoring software and access restrictions have been reconfirmed. - FY2017MitigatedAnnual report
「The Group has established rules governing the handling of personal information, including basic policies, regulations and detailed rules, and has developed the necessary systems. In its IT systems, it has strengthened the storage of personal-information files, introduced monitoring software for office automation systems, restricted access privileges, and strengthened information management across the board, including the handling of information other than personal information. However, if personal information were to be leaked externally due to an unforeseen event, the Group could suffer a loss of sales from reputational damage or incur costs from damages claims, which could affect the Group's performance.」
While risks to reputation, sales and damages claims in the event of a personal-information leak remain, specific controls have been developed, including establishing regulations, strengthening file storage, and using monitoring software and access restrictions. - FY2016First statedAnnual report
「However, if personal information were to be leaked externally due to an unforeseen event, the Group could suffer a loss of sales from reputational damage or incur costs from damages claims, which could affect the Group's performance.」
The handling of personal information of condominium customers, unit owners and others entails risks to reputation, sales and damages claims in the event of a leak.