Risk of External Leakage of Personal Information
First written in FY2017. 1 of 3 entries say "Mitigated", first in FY2021. Latest entry: FY2026.
Shobunsha Holdings moved to the "Worse" side of this theme in 2026, the same year as the typical company in this theme.
The whole theme swung hardest in 2025: 4 of 19 companies on the "Worse" side.
1 other company's latest entry also says "Reframed".
- FY2026ReframedAnnual report
「With respect to personal information of customers and others and confidential information of business partners and others, if a security incident such as a ransomware attack, targeted attack or phishing attack, or inappropriate handling, occurs at our group or at a business partner or outsourcing provider and results in an information leak or other event, this could have a material impact on the performance and social credibility of our group.」
The scope has expanded from the previous risk of personal information leaks to security incidents generally, including confidential information of business partners, ransomware, targeted attacks and phishing. - FY2021MitigatedAnnual report
「In addition to working to prevent information leaks, we have taken steps to stipulate in our contracts that business partners and outsourcing providers handle information in the same manner.」
The company has expanded the scope of its response to the risk of personal information leaks from its own operations to business partners and outsourcing providers, and has specified the required handling contractually. - FY2017First statedAnnual report
「Although our group works to prevent information leaks by establishing internal controls, including rules for managing personal information and internal networks, and strengthening its management systems, if personal information is leaked externally due to unauthorized external access or an unforeseen event, this could adversely affect the performance and social credibility of our group.」
The company manages personal information under rules governing its control and other measures, while stating that information leaks caused by unauthorized access and other events could affect performance and social credibility.