> JapanHacked_
[Contained][Severity: Critical][Intrusion]

Sompo Japan: web system intrusion; data may have been exposed

Unauthorized access to a web subsystem was confirmed and blocked on April 21. June's report separately listed about 3.37 million name/contact/identifier entries, 1.87 million name/identifier entries, 1.19 million contact/identifier entries, 830,000 other customer entries, 1.78 million agency entries and 8.44 million identifier-only entries. These may include duplicates; identifier entries are not a person count. Names, contact details and birth dates were among the fields. No external leakage or misuse had been confirmed as of July 25.

Disclosed

2025-04-25

Organizations involved

1

Leaked or at risk

8.4M

8,440,000

Downtime

Unknown

Timeline

  1. Started 2025-04-17
  2. Detected 2025-04-21
  3. Disclosed 2025-04-25
  4. 8 days

Organizations involved

Open in organization search

Sources

  1. [1][Official]当社システムに対する不正アクセスの発生及び情報流出の可能性についてSompo Japan Insurance Inc. · 2025-04-25
  2. [2][Official]当社システムに対する不正アクセスの発生及び情報漏えいの可能性について(第2報)Sompo Japan Insurance Inc. · 2025-06-11
  3. [3][Official]当社システムに対する不正アクセスの発生及び情報漏えいの可能性について(一覧)Sompo Japan Insurance Inc. · 2025-07-25