Computer System Failures and Personal Information Breaches
First written in FY2016. 4 of 10 entries say "Mitigated", first in FY2017. Latest entry: FY2026.
The whole theme swung hardest in 2026: 32 of 107 companies on the "Worse" side.
- FY2026AdvancedAnnual report
「As part of these initiatives, we conducted data mapping to identify how personal data is used across various services. Based on the results, we are continuously reviewing and improving the appropriateness of our operations.」
For information security and personal information management, conducted data mapping to identify how personal data is used and translated this into specific operational reviews. - FY2025MitigatedAnnual report
「For these initiatives, we hold meetings of the Information Security Committee, chaired by the Chief Information Security Officer (CISO), to determine policies and manage progress. In addition, we have established privacy governance systems for the acquisition and use of personal information, and are working to ensure proper business operations and compliance with laws and regulations.」
Established policy and progress management by the Information Security Committee, as well as a privacy governance system. - FY2024MitigatedAnnual report
「In addition, we have established data governance systems for the acquisition and use of personal information and the management of confidential information, and are working to ensure proper business operations and compliance with laws and regulations.」
In addition to conventional information security inspections, efforts to improve IT literacy, and training, established a data governance system. - FY2023MitigatedAnnual report
「We regularly inspect the status of our information security measures and continuously review measures for our proprietary systems, while improving the IT literacy of directors and employees through training and other initiatives. We are also working to establish an initial response framework and conduct training during normal operations to minimise the impact if a system failure, information leakage incident or cyberattack occurs.」
Specified a response combining information security, IT literacy, initial response procedures, and routine training. - FY2022RestatedAnnual report
「Our group inspects its proprietary systems, implements information security measures, enhances their functions and provides employee training to prevent failures and accidents. We are also working to establish a rapid initial response framework to minimise the impact if a failure or accident occurs.」
We continue to respond to the risks of system failures, cyberattacks and personal information breaches through information security measures, inspections, training and an initial response framework. - FY2020RestatedAnnual report
「Our group inspects its proprietary systems, enhances their functions and provides employee training to prevent failures and accidents. We are also working to establish a rapid initial response framework to minimise the impact if a failure or accident occurs.」
We continue to respond to the risks of system failures and personal information breaches through inspections, functional enhancements, training and an initial response framework. - FY2019RestatedAnnual report
「Our group inspects its proprietary systems, enhances their functions and provides employee training to prevent failures and accidents. We are also working to establish a rapid initial response framework to minimise the impact if a failure or accident occurs.」
We continue to respond to the risks of system failures and personal information breaches through inspections, training and an initial response framework. - FY2018RestatedAnnual report
「Our group inspects its proprietary systems, enhances their functions and provides employee training to prevent failures and accidents. We are also working to establish a rapid initial response framework to minimise the impact if a failure or accident occurs.」
The risks of system failures and personal information breaches, and countermeasures involving inspections, training, an initial response framework, and stronger facilities and infrastructure, continue to be described. - FY2017MitigatedAnnual report
「Our group inspects its proprietary systems, enhances their functions and provides employee training to prevent failures and accidents. We are also working to establish a rapid initial response framework to minimise the impact if a failure or accident occurs.」
Responses to the risks of system failures and personal information breaches, including inspections, functional enhancements, training, an initial response framework, and stronger facilities and infrastructure, were described. - FY2016First statedAnnual report
「Our group operates systems related to train operations and the sale of reserved-seat tickets, as well as various systems covering our businesses generally, and computer systems play a critical role.」
Given our dependence on systems for train operations, sales and our businesses generally, we identify human error, natural disasters, power outages, viruses and personal information breaches as risks.