> JapanHacked_
[Contained][Severity: Critical][Intrusion]

Aflac Life: a contractor's video delivery server was accessed without authorization and data of 1,323,468 cancer insurance holders leaked

A contractor's video server was accessed from January 7 and the surnames, ages, sexes and policy numbers of 1,323,468 cancer insurance holders were posted on a leak site.

Disclosed

2023-01-10

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. There may have been unauthorized access to the server used by the contractor from this day on. [1]

  2. It learned that customer data was posted on a data leak site and confirmed it. The data was part of the personal data it had given to the contractor. [1] [2]

  3. It confirmed that the contractor where the data came from had deleted the data it supplied from the server. It announced the case and reported to the Financial Services Agency and others. [1] [3]

Impact

The surname only, age, sex, policy number, insurance type number, coverage amount and premium of 1,323,468 holders of the "Shin Cancer Insurance", "Super Cancer Insurance" and "Super Cancer Insurance V Type" (3,158,199 data records in total) leaked. The company judges that these items alone cannot identify a person and that the chance of misuse is very low. [1] [2]

Timeline

  1. Started 2023-01-07
  2. Detected 2023-01-09
  3. Disclosed 2023-01-10
  4. 3 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Supplier

Data exposed or at risk

[Name][Gender]

Organizations involved

Open in organization search

Sources

  1. [1][News]アフラック生命、個人情報流出を発表 | 新日本保険新聞社・シンニチ保険WEBShin-Nihon Insurance News · 2023-01-10
  2. [2][News]アフラックの個人情報130万人分が流出、外部委託業者が不正アクセス受け | 日経クロステック(xTECH)Nikkei xTECH · 2023-01-11
  3. [3][News]アフラック「新がん保険」「スーパーがん保険」「スーパーがん保険Vタイプ」加入者情報漏えい、1月7日に外部業者に不正アクセスScanNetSecurity · 2023-01-12 08:05