Sumitomo Mitsui Trust Bank: a Salesforce setting flaw in its card loan application desk exposed data of 2,101 applicants to outsiders, and data of 102 may have leaked

1. 2016-12-27

   Information on people who applied for a card loan from this day until July 18, 2020 was viewable from outside. [1]

2. 2020-11-23

   On this day, on November 25 and on January 6, 2021, there were five accesses from outside in total. [1]

The customer data of 2,101 people in total who applied for a card loan on the bank's website could be viewed from outside because of a problem in the access permission settings of Salesforce. The data of 102 of them may have leaked: name and email address for one person and email address only for 101. The bank said the other data had no setting problem and could not have been viewed. [1]

The 101 people who were accessed could not be identified. The logs the bank received from Salesforce held no data identifying customers, and Salesforce answered that it kept no data to identify them either. [1]