Reputational Damage Caused by Unauthorized Access to Company Systems and Information Breaches
First written in FY2021. 2 of 3 entries say "Restated". Latest entry: FY2025.
The whole theme swung hardest in 2024: 12 of 87 companies on the "Worse" side.
- FY2025RestatedAnnual report
「We endeavor to select cloud services used by our Group that operate on cloud technology platforms designed, built and configured for secure operation, and are strengthening security for access by installing EDR tools on information devices in use and using multifactor authentication. However, if our Group's systems were penetrated to spread viruses, technical information such as source code or personal information relating to customers or employees were stolen or leaked, or information on our website were falsified, these acts could damage the Group's reputation.」
It continues to describe the reputational risk of unauthorized access to proprietary systems and information leakage, together with measures such as EDR and multifactor authentication. - FY2022RestatedAnnual report
「The services of our Group involve obtaining important customer information. Leakage of this customer information represents a major risk to our business operations. Although we have implemented measures including internal training, restricting access through permissions for various data, locking written information in storage, and controlling entry to and exit from offices, any leakage of customer information could affect the Group's operating results and financial position.」
It identifies customer information leakage, in addition to intrusion into proprietary systems, as a major risk and describes measures including training, access permissions and entry and exit controls. - FY2021First statedAnnual report
「We endeavor to select cloud services operating on cloud technology platforms designed, built and configured for secure operation, and are strengthening security for access by installing EDR tools on information devices in use and using multifactor authentication. However, if our systems were penetrated to spread viruses, technical information such as source code or personal information relating to customers or employees were stolen or leaked, or information on our website were falsified, these acts could damage the company's reputation.」
As a provider of security services, it states that unauthorized access and information leakage could have a material impact on its reputation and business activities, and cites EDR and multifactor authentication as countermeasures.