> JapanHacked_
[Resolved][Severity: Major][Misdelivery]

Tokio Marine & Nichido: sending survey data to an agency, it wrongly included names and IDs of about 12,000 agents from other agencies

Survey data sent to one agency wrongly included names and agent IDs of about 12,000 insurance agents belonging to other agencies.

Disclosed

2025-05-02

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. An employee sent survey result data to one agency through the agency system. The data used to add agent names contained agents of other agencies, which went unnoticed and was sent as is. The receiving agency reported it. [1]

  2. It announced the incident. It confirmed the data was deleted at the recipient and not forwarded outside, and had found no misuse. [1] [2]

Impact

About 12,000 agents' names and agent IDs assigned by the General Insurance Association of Japan, among other items, were disclosed. [1]

Timeline

  1. Started, Detected 2025-02-19
  2. Disclosed 2025-05-02
  3. 72 days

Attack or cause

Method
[Misdelivery]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Employment]

Organizations involved

Open in organization search

Sources

  1. [1][Official]当社代理店へのデータ誤送信による募集人情報の漏えいに関するお詫びTokio Marine & Nichido Fire Insurance Co., Ltd. · 2025-05-02
  2. [2][News]東京海上日動火災保険で代理店にデータ誤送信、約 12,000 件の情報が漏えいScanNetSecurity · 2025-05-19 08:05