Mercedes-Benz Japan: a settings flaw in its warranty management system left personal data on about 15,200 customers who had filed warranty cancellations viewable from outside for seven days

1. 2025-07-19

   Part of the data stored in the warranty management system became viewable from outside (until the 25th). [1]

2. 2025-07-25

   It found that the data had been viewable from outside and fixed it immediately. [1]

3. 2025-07-29

   It confirmed that it could not rule out that personal data had been exposed. [1]

4. 2025-08-01

   It announced the incident. It had already reported to the Personal Information Protection Commission. [1] [2] [3]

About 15,200 people who had filed a warranty program cancellation were covered: name, address, phone number, email address, chassis number, vehicle registration number and similar items. No card or bank account data was included. No leak or secondary harm has been confirmed. The cause was a flawed access restriction setting during maintenance work. [1] [2]