Aflac Life: a contractor's video delivery server was accessed without authorization and data of 1,323,468 cancer insurance holders leaked
A contractor's video server was accessed from January 7 and the surnames, ages, sexes and policy numbers of 1,323,468 cancer insurance holders were posted on a leak site.
Disclosed
2023-01-10
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
There may have been unauthorized access to the server used by the contractor from this day on. [1]
It learned that customer data was posted on a data leak site and confirmed it. The data was part of the personal data it had given to the contractor. [1] [2]
It confirmed that the contractor where the data came from had deleted the data it supplied from the server. It announced the case and reported to the Financial Services Agency and others. [1] [3]
Impact
The surname only, age, sex, policy number, insurance type number, coverage amount and premium of 1,323,468 holders of the "Shin Cancer Insurance", "Super Cancer Insurance" and "Super Cancer Insurance V Type" (3,158,199 data records in total) leaked. The company judges that these items alone cannot identify a person and that the chance of misuse is very low. [1] [2]
Timeline
- Started 2023-01-07
- Detected 2023-01-09
- Disclosed 2023-01-10
- 3 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Supplier
Data exposed or at risk
Organizations involved
[Breached][Critical]Tokyo, ShinjukuFinance and insurance1,323,468 leaked
Aflac Life Insurance Japan Ltd.The server of a contractor that delivers videos linked from a QR code in direct mail to customers was hit. The contractor is not named.
Sources
- [1][News]アフラック生命、個人情報流出を発表 | 新日本保険新聞社・シンニチ保険WEBShin-Nihon Insurance News · 2023-01-10
- [2][News]アフラックの個人情報130万人分が流出、外部委託業者が不正アクセス受け | 日経クロステック(xTECH)Nikkei xTECH · 2023-01-11
- [3][News]アフラック「新がん保険」「スーパーがん保険」「スーパーがん保険Vタイプ」加入者情報漏えい、1月7日に外部業者に不正アクセスScanNetSecurity · 2023-01-12 08:05