Leakage and Other Incidents Involving Personal and Confidential Information
First written in FY2016. 5 of 10 entries say "Restated". Latest entry: FY2026.
The whole theme swung hardest in 2026: 26 of 91 companies on the "Worse" side.
28 other companies' latest entry also says "Mitigated".
- FY2026MitigatedAnnual report
「June 2025: RS Hosting Service obtained ISO/IEC 27017 certification November 2025: WINS Water Tariff Assessment System and WINS Public Utility Accounting System obtained ISO/IEC 27017 certification」
In addition to its existing ISMS, PMS and CSIRT measures, the Group has obtained ISO/IEC 27017 certification for its hosting services and WINS system, expanding its information security measures. - FY2025RestatedAnnual report
「If information leakage, tampering or other incidents caused by cyberattacks and other events occur, the resulting decline in the Group's social credibility and substantial expenses for subsequent response measures and compensation for damages may affect business results and other matters.」
The Group continues to disclose the risks of information leakage and tampering, as well as its response through ISMS and PMS certifications, information security meetings and CSIRT activities. - FY2024-Q3MitigatedAnnual report
「The company obtained ISO 27017 certification for its cloud service supporting data utilization, the Meter Data Operations Management System, and worked to further improve the service's safety and reliability.」
The Group discloses the acquisition of ISO 27017 certification for information security controls for cloud services as an enhancement of its response to risks such as information leakage. - FY2022RestatedAnnual report
「The Group has obtained ISMS (Information Security Management System) and PMS (Personal Information Protection Management System) certifications and undertakes information security initiatives, including process-based control management, responses to information security risks through information security meetings, and responses to information security incidents within the Group through CSIRT (Computer Security Incident Response Team) activities, but」
The Group continues to disclose its response to information leakage and other incidents through ISMS and PMS certifications, information security meetings and CSIRT activities. - FY2020MitigatedAnnual report
「The Group has obtained ISMS (Information Security Management System) and PMS (Personal Information Protection Management System) certifications and undertakes information security initiatives, including process-based control management, responses to information security risks through information security meetings, and responses to information security incidents within the Group through CSIRT (Computer Security Incident Response Team) activities, but」
The Group specifies ISMS and PMS certifications, information security meetings and CSIRT activities as measures to address conventional risks such as information leakage. - FY2019RestatedAnnual report
「Threats such as information leakage, loss and other incidents caused by cyberattacks are becoming more complex and sophisticated each year, and increasingly advanced security technology continues to be required. If information leakage, tampering or other incidents occur, substantial expenses may arise for response measures and compensation for damages, potentially affecting the performance of the Group.」
The disclosure reconfirms the threats of information leakage, loss and tampering caused by cyberattacks and other incidents, as well as the risks of expenses and an impact on business results if they occur. - FY2019-Q1RestatedAnnual report
「Threats such as cyberattacks are also becoming more complex and sophisticated each year, and increasingly advanced security technology continues to be required.」
The disclosure reconfirms the increasing complexity and sophistication of threats such as cyberattacks and the need for more advanced security technology to protect personal and confidential information and other assets. - FY2018WorsenedAnnual report
「New threats, including ransomware and business email compromise, are becoming more complex and sophisticated each year, and increasingly advanced security technology is required to protect personal information, confidential information and assets.」
In addition to conventional risks such as information leakage, the disclosure explicitly identifies the increasing complexity and sophistication of new threats, including ransomware and business email compromise. - FY2017RestatedAnnual report
「If loss during storage or transportation, information leakage, tampering or other incidents occur, substantial expenses may arise for response measures and compensation for damages, and the Group's reputation may suffer, potentially affecting the performance of the Group.」
The disclosure reiterates the expense and reputational risks associated with the loss, leakage and tampering of customers' personal and confidential information. - FY2016First statedAnnual report
「If loss during storage or transportation, leakage, tampering or other incidents occur, substantial expenses may arise for response measures and compensation for damages, and the Group's reputation may suffer, potentially affecting the performance of the Group.」
The risks identified are loss, leakage and tampering associated with holding customers' personal and confidential information.