Sompo Japan: web system intrusion; data may have been exposed
Unauthorized access to a web subsystem was confirmed and blocked on April 21. June's report separately listed about 3.37 million name/contact/identifier entries, 1.87 million name/identifier entries, 1.19 million contact/identifier entries, 830,000 other customer entries, 1.78 million agency entries and 8.44 million identifier-only entries. These may include duplicates; identifier entries are not a person count. Names, contact details and birth dates were among the fields. No external leakage or misuse had been confirmed as of July 25.
Disclosed
2025-04-25
Organizations involved
1
Leaked or at risk
8.4M
8,440,000
Downtime
Unknown
Timeline
- Started 2025-04-17
- Detected 2025-04-21
- Disclosed 2025-04-25
- 8 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Critical]Tokyo, ShinjukuFinance and insurance8,440,000 leaked
Sompo Japan Insurance Inc.
Sources
- [1][Official]当社システムに対する不正アクセスの発生及び情報流出の可能性についてSompo Japan Insurance Inc. · 2025-04-25
- [2][Official]当社システムに対する不正アクセスの発生及び情報漏えいの可能性について(第2報)Sompo Japan Insurance Inc. · 2025-06-11
- [3][Official]当社システムに対する不正アクセスの発生及び情報漏えいの可能性について(一覧)Sompo Japan Insurance Inc. · 2025-07-25