Information System Failures, Cyberattacks and Personal Information Leaks
First written in FY2016. 3 of 8 entries say "Mitigated", first in FY2017. Latest entry: FY2026.
The whole theme swung hardest in 2026: 31 of 106 companies on the "Worse" side.
- FY2026WorsenedAnnual report
「In addition, advances in AI technology in recent years may give rise to new risks specific to AI, including unexpected AI behavior and the leakage of confidential information.」
In addition to the conventional risks of information-system failures and cyberattacks, new risks involving unexpected AI behavior and confidential-information leaks were explicitly identified. - FY2022MitigatedAnnual report
「The Group takes measures to prevent system failures and enhance security, including regularly improving its information systems, continuously monitoring security and training relevant employees. Even if a problem occurs, it seeks to minimize the impact by promptly establishing an initial-response structure and having each department coordinate its countermeasures.」
As a response to information-system failures, cyberattacks and personal-information leaks, continuous monitoring, training, initial-response procedures and access-rights management have been maintained and clarified. - FY2019RestatedAnnual report
「The Group takes measures to prevent system failures and enhance security, including regularly improving its information systems and training relevant employees. Even if a problem occurs, it seeks to minimize the impact by promptly establishing an initial-response structure and having each department coordinate its countermeasures.」
Training, security measures and initial-response procedures addressing information-system failures, cyberattacks and personal-information leaks remain in place. - FY2018MitigatedAnnual report
「In light of the recent increase in the number and sophistication of cyberattacks, we revised the "10 Information Security Rules," which set out the requirements employees must follow, and provided training to all Group employees to ensure compliance.」
As a response to the risks of cyberattacks and information-system failures, the "10 Information Security Rules" were revised and training was provided to all Group employees. - FY2018-Q3RestatedAnnual report
「The Group takes measures to prevent system failures and enhance security, including regularly improving its information systems and training relevant employees. Even if a problem occurs, it seeks to minimize the impact by promptly establishing an initial-response structure and having each department coordinate its countermeasures.」
Policies covering security measures, training, initial response and access-rights management for information-system failures, cyberattacks and personal-information leaks remain in place. - FY2018-Q2RestatedAnnual report
「The Group takes measures to prevent system failures and enhance security, including regularly improving its information systems and training relevant employees. Even if a problem occurs, it seeks to minimize the impact by promptly establishing an initial-response structure and having each department coordinate its countermeasures.」
Policies covering training, security measures, initial response and access-rights management for information-system failures, cyberattacks and personal-information leaks remain in place. - FY2017MitigatedAnnual report
「In addition, preparations are under way to introduce "puzzle authentication," which is difficult for software to decipher mechanically, for the internet JR ticket application service "Ekinet" and the travel-product sales website, and to establish systems that block unauthorized access by monitoring and analyzing page access.」
Measures addressing the risks of information-system failures and personal-information leaks have been expanded, including authentication, unauthorized-access monitoring, initial-response procedures and access-rights management for personal information. - FY2016First statedAnnual report
「If personal information or other data on the information systems is leaked externally, or if data is falsified, due to computer virus infections, unauthorized human actions or other causes, this could affect the financial condition and operating results of the group.」
Measures covering system enhancements, employee training, access-rights management and internal checking procedures are described.