Japan's MS&AD Policyholder Portals Breached, Leaking Over 720,000 Customer Records
Cybersecurity and privacy
Japan's MS&AD Insurance Group reported unauthorized access to policyholder portals across subsidiaries including Mitsui Sumitomo Insurance, leaking over 720,000 customer records. Affected services were halted and disconnected for investigation.
Japan's MS&AD Insurance Group Holdings announced that unauthorized access to policyholder web portals across its subsidiaries resulted in the leak of over 720,000 personal customer records. The companies detected illicit access on November 2, suspended affected portal services on November 3 to prevent further damage, and disconnected external access for investigation. The compromised data includes policy details, personal contact information, and in some instances, banking branch codes and partial credit card numbers.
Key takeaways
- Mitsui Sumitomo Insurance announced a leak of roughly 37,000 records, including insurance certificate numbers, names, phone numbers, and email addresses.
- Aioi Nissay Dowa Insurance reported 444,000 leaked records, which included portal IDs, bank branch details, and three instances of the last four credit card digits alongside personal contact info.
- Media reports indicate Mitsui Sumitomo Aioi Life and Mitsui Direct General Insurance were also affected, leaking 5,000 and 234,000 records respectively, with their portals taken offline.
Source：iThome Read the original ↗
Prepared, checked and automatically published by AI; not individually reviewed by a human. Translation checked by AI.