Editorial & correction policy

1. Source priorities

• Official announcements by companies and organizations (news releases, apologies, investigation reports) are the primary basis.
• Next, announcements by public bodies: the Personal Information Protection Commission, the National Police Agency, IPA, and JPCERT/CC.
• Press articles are used as supplementary sources when primary information is unavailable, with the outlet named.
• Social media and forum posts are never treated as fact on their own; even when introduced as trends, sources are cited.

2. Scope of AI use

• AI is used to collect disclosure materials and draft summaries.
• AI drafts are never published as-is: the editorial team checks them against sources, and the editor-in-chief reviews them before publication.
• Proper nouns, dates, and figures such as affected counts are always verified against the primary source.

3. Review system

• Every news and incident page is reviewed by editor-in-chief Yutaro Sasao.
• Review covers cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution.
• Each page displays its publication date, last-updated date, and reviewer; the last-updated date is revised when follow-ups change the content.

4. Severity rating and wording

• Severity (SSS–D) is this site's own gauge; the criteria are published on the criteria page.
• Severity compares the gravity of incidents; it is not an assessment of a company's overall security.
• We distinguish "possible leak", "partial leak confirmed", and "leak confirmed" per the disclosure wording, and avoid unnecessarily alarmist language.
• We do not publish information identifying individual victims or related parties.

5. Independence

• We never accept payment from covered companies to publish, delete, or re-rate content.
• If advertising or tie-ups are carried, they are labeled within the article and distinguished from editorial content.

6. Correction & deletion requests