Risk of Leakage of the Secrecy of Communications and Customer Information
First written in FY2016. 4 of 10 entries say "Mitigated", first in FY2021. Latest entry: 2026-09-18.
The whole theme swung hardest in 2026: 13 of 71 companies on the "Worse" side.
- 2026-09-18Materialisedfinance.yahoo.co.jp
「ISP事業者向けメールシステムで第三者による不正アクセスが判明し、関係先と連携して対応しています。」
顧客・関係先の情報管理に関する脅威が、第三者による不正アクセスとして実際に発生したと報じられた。 - FY2026WorsenedAnnual report
「In recent years, cyberattack methods have become increasingly sophisticated and deceptive, and the risk of serious impacts on corporate activities has risen due to the increase in ransomware attacks and attacks using AI.」
Newly specified threats to customer information and communications secrecy include ransomware, attacks using AI and sophisticated attacks with geopolitical motives. - FY2024MitigatedAnnual report
「KDDI has also established a system to detect phishing scams and coordinate with relevant organisations to prevent damage caused by fraudulent websites, and to monitor unauthorised use of services 24 hours a day, 365 days a year.」
The response to customer information leaks and unauthorised use risks has been made more specific through phishing detection, coordination with relevant organisations and a 24-hour, 365-day monitoring system. - FY2023MitigatedAnnual report
「In addition, to ensure the proper handling of customer information, we have taken measures including establishing internal structures, conducting third-party assessments and introducing privacy impact assessments (PIAs) before service launch.」
Disclosed measures addressing these risks, including third-party assessments and PIAs, security by design, AI monitoring functions, KDDI-SSIRT and anti-phishing measures. - FY2022MitigatedAnnual report
「In addition to implementing security by design, which incorporates security measures from the planning and design stages, we are strengthening system security by adopting the latest research and development成果 and working to provide secure and reliable services.」
The response to customer information leaks and cyberattack risks has been expanded to include security measures from the planning and design stages and the adoption of research成果. - FY2021MitigatedAnnual report
「We are implementing measures to ensure the proper handling of customer information, including establishing internal organizational structures, conducting third-party assessments, and introducing privacy impact assessments (PIAs) before services are launched.」
Additional management and assessment measures have been introduced to address the risk of breaches of communications secrecy and customer information leaks, including third-party assessments and privacy impact assessments (PIAs) before service launch. - FY2019WorsenedAnnual report
「If an information leak occurs, it could damage the Group's brand image and credibility, involve substantial compensation payments and administrative fines, and adversely affect the Group's financial position and operating results. In addition, further costs may arise in the future to establish systems for protecting the secrecy of communications and customer information.」
In addition to the previously identified effects on compensation and credibility, explicitly identifies administrative fines, compliance with global legal frameworks such as the GDPR, and additional protection costs. - FY2016First statedAnnual report
「However, there is no guarantee that information leaks will not occur in the future. If an information leak occurs, it could damage the Group's brand image and credibility, involve substantial compensation payments, and adversely affect the Group's financial position and operating results.」
Also lists measures including the Information Security Committee, access-rights management, log retention, training, and audits.