Awa Bank: unauthorized access to an OA system test environment
On 24 March, an outside security firm told Awa Bank that its data might be leaking; the bank confirmed it on 25 March. A test environment of its internal information-sharing system had been accessed, and 27,745 records leaked in total, including 10,872 corporate internet banking clients and 11,122 shareholders. The follow-up on 3 June named the causes: customer data was not deleted after development finished, and protection against unauthorized access did not work well enough.
Disclosed
2026-04-03
Organizations involved
1
Leaked or at risk
27.7K
27,745
Downtime
Unknown
Timeline
- Detected 2026-03-24
- Disclosed 2026-04-03
- 10 days
Attack or cause
- Method
- [Intrusion][Misconfiguration]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Major]Tokushima, TokushimaFinance and insurance27,745 leaked
The Awa Bank, Ltd.
Sources
- [1][Official]不正アクセスによるお客さま情報等の漏えい発生についてThe Awa Bank · 2026-04-03
- [2][Official]不正アクセスによるお客さま情報等の漏えい発生について(続報)The Awa Bank · 2026-06-03