Leakage of Personal and Other Sensitive Information
First written in FY2016. 3 of 9 entries say "Restated". Latest entry: FY2025.
The whole theme swung hardest in 2026: 12 of 69 companies on the "Worse" side.
- FY2025MitigatedAnnual report
「To further strengthen the management of personal information (including specified personal information) and other information, the Group will establish a dedicated department and develop internal rules based on the Act on the Protection of Personal Information and other relevant laws and regulations, while further strengthening initiatives such as training and awareness-building activities.」
As measures following the information-leakage incidents, the Group is strengthening the establishment of a dedicated department, the development of internal rules, training and awareness-building, risk assessments, and the identification and remediation of vulnerabilities in IT systems. - FY2024-Q2MitigatedAnnual report
「In addition, in connection with these matters, Chubu Electric Power Grid and Chubu Electric Power Miraiz received guidance and requests for reports and other information from the Personal Information Protection Commission on 29 June 2023, and submitted reports on 29 September of the same year. Chubu Electric Power Grid and Chubu Electric Power Miraiz will steadily implement the measures to prevent recurrence announced on 12 May 2023.」
Regarding the inappropriate handling of customer information and FIT certification information, the companies reported to the Personal Information Protection Commission and stated that they would steadily implement measures to prevent recurrence. - FY2024-Q1WorsenedAnnual report
「In addition, Chubu Electric Power Grid identified an incident in which customer information managed in its wheeling-service system was leaked to Chubu Electric Power Miraiz and its contractors. At Chubu Electric Power Miraiz, an incident was identified in which an employee viewed, through the customer-management system, information on customers who had contracts with retail electricity operators other than Chubu Electric Power Miraiz. In connection with these matters, Chubu Electric Power Grid and Chubu Electric Power Miraiz received business-improvement recommendations from the Electricity and Gas Market Surveillance Commission on 17 April 2023 and submitted reports addressing those recommendations on 12 May of the same year. Chubu Electric Power Grid also failed to properly manage the IDs and passwords issued to access the Ministry of Economy, Trade and Industry's Renewable Energy Business Management System, resulting in an incident in which employees of Chubu Electric Power Miraiz were also able to view FIT certification information on the system.」
In addition to the previously reported information-leakage incidents, a new information-management incident was identified in which FIT certification information was accessible. The disclosure also describes the business-improvement recommendations from the Electricity and Gas Market Surveillance Commission, guidance from the Agency for Natural Resources and Energy, and guidance and requests for reports from the Personal Information Protection Commission. - FY2023-Q3MaterialisedAnnual report
「In addition, Chubu Electric Power Grid identified an incident involving the leakage to Chubu Electric Power Miraiz and its contractors of customer information managed in its wheeling-service system. Chubu Electric Power Miraiz also identified an incident in which it had viewed customer information belonging to retail electricity operators other than Chubu Electric Power Miraiz through its customer-management system. On 27 January 2023, both companies received requests for reports from the Electricity and Gas Market Surveillance Commission and the Personal Information Protection Commission, respectively.」
Regarding information leakage, which had previously been identified as a risk, incidents involving leakage from the wheeling-service system and the viewing of another company's customer information were identified, and both companies received requests for reports. - FY2021ReframedAnnual report
「To ensure a stable supply of energy, a critical infrastructure service, the Group continues to implement measures including strengthening its governance structure, sharing and analyzing information with other operators and relevant organizations through bodies such as the Electricity-ISAC, and conducting various security measures and training to address the risk of disruptions to electricity supplies caused by cyberattacks and the leakage of sensitive information.」
The scope has expanded from the previous focus on personal and critical information management to security risks including supply disruptions caused by cyberattacks, leakage of sensitive information and economic security. - FY2019RestatedAnnual report
「To properly manage important information, including personal information (including specified personal information), the Group has established internal systems and rules for handling information in accordance with laws and regulations, and has implemented measures including strengthening information-system security and providing employee training.」
The Group continues to maintain information-management rules, strengthen system security and provide employee training. - FY2018RestatedAnnual report
「However, if information leakage or a similar incident results in direct costs required to address it, as well as a decline in social credibility, business performance may be affected.」
The disclosure specifies the impact on business performance from direct costs and reputational damage in the event of a leak, in addition to information-management rules, system security and employee training. - FY2017RestatedAnnual report
「To properly manage important information, including personal information (including specified personal information), the Group has established internal systems and rules for handling information in accordance with laws and regulations, and has implemented measures including strengthening information-system security and providing employee training.」
Information-management rules, strengthened system security and employee training are reiterated as measures to address information leakage. - FY2016First statedAnnual report
「To properly manage important information, including personal information (including specified personal information), the Group has established internal systems and rules for handling information in accordance with laws and regulations, and has implemented measures including strengthening information-system security and providing employee training.」
Information-management rules, strengthened system security and employee training are listed as measures.