> JapanHacked_
[Investigating][Severity: Major][Insider]

Tokio Marine & Nichido: an employee seconded to agency FP Partner leaked about 35,000 customer contracts of other insurers to the company

An employee seconded to the agency FP Partner leaked other insurers' customers' names, addresses, phone numbers and policy numbers, to Tokio Marine & Nichido.

Disclosed

2024-08-15

Organizations involved

2

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It received a report demand order from the Financial Services Agency. [1]

  2. It reported the leak by its seconded employee to FP Partner. [2]

  3. Both companies announced the case. The leaked contract information was about 35,000 items. They said they had confirmed that no secondary leak had occurred. [1] [2] [3]

Impact

The leaked information is policyholders' (insured persons') names, addresses, phone numbers, birth dates, policy numbers, insurance types, start and expiry dates, premiums and insurer names. No sensitive information was confirmed. The leaks continued from March 2021 to October 2023. The information was used to check each insurer's share at FP Partner and Tokio Marine & Nichido's position. [1]

Timeline

  1. Detected 2024-07-22
  2. Disclosed 2024-08-15
  3. 24 days

Attack or cause

Method
[Insider]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Postal address][Phone number][Date of birth]

Organizations involved

Open in organization search

Sources

  1. [1][Official]代理店への当社出向者による情報漏えいに関するお詫びTokio Marine & Nichido Fire Insurance Co., Ltd. · 2024-08-15
  2. [2][Official]お客さま情報の漏えい事案についてのお詫びとお知らせFP Partner Inc. · 2024-08-15
  3. [3][News]東京海上日動火災保険から代理店に出向した社員が契約情報を漏えいScanNetSecurity · 2024-08-28 08:05