> JapanHacked_
[Investigating][Severity: Major][Insider]

Total Insurance Service: a seconded Sompo Japan employee leaked customer contract data to Sompo Japan

An employee seconded from Sompo Japan leaked about 2,700 customer non-life insurance contracts of the agency to Sompo Japan, with policyholder names and premiums.

Disclosed

2024-07-12

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It learned from Sompo Japan's report that information had leaked. [1]

  2. It announced the case. It said it knew the leak was by a person seconded from Sompo Japan, but that details were still being investigated. It would report to the authorities and contact the customers concerned in turn. [1] [2]

Impact

The data confirmed leaked is policyholder names (company names and some representatives' names), insurer names (19 non-life insurers including Sompo Japan), insurance types, periods and premiums, and the agency's department and staff names. About 2,700 contracts in total are covered. [1]

Timeline

  1. Detected 2024-07-10
  2. Disclosed 2024-07-12
  3. 2 days

Attack or cause

Method
[Insider]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]お客様の契約情報等の漏えいについてTotal Insurance Service Limited · 2024-07-12
  2. [2][News]損保ジャパンからの出向者が関与か ～ トータル保険サービス顧客の契約情報漏えいScanNetSecurity · 2024-07-25 08:05