> JapanHacked_
[Resolved][Severity: Major][Misdelivery]

Norinchukin Bank: production data got into a modification test and 3,176 personal data records of JA Sapporo members were wrongly provided to JA group bodies and a contractor

On June 30 Norinchukin Bank announced that production data got into a system tool test and 3,176 personal data records of JA Sapporo members were wrongly provided.

Disclosed

2026-06-30

Organizations involved

2

Leaked or at risk

3.2K

3,176

Downtime

Unknown

What happened

  1. It found that, in a modification test of a system tool for checking JA members' usage, data including personal information of JA Sapporo members and users had been wrongly provided to JA group bodies and the contractor building the tool. [1] [2]

  2. It announced the personal data leak. The data was 3,176 records. [1] [2]

Timeline

  1. Detected 2026-05-27
  2. Disclosed 2026-06-30
  3. 34 days

Attack or cause

Method
[Misdelivery]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

–

Supply chain

The Norinchukin Bank

[Breached]

Organizations listed on this site
2

Organizations involved

  • [Breached][Major]Tokyo, ChiyodaFinance and insurance3,176 leaked

    The Norinchukin Bank

    Production data got into a modification test and JA Sapporo members' personal data was wrongly provided to related bodies and a contractor.

  • [Through a supplier][Major]Hokkaido, Sapporo, Chuo WardCompound services3,176 leaked

    JA Sapporo

    Its members' and users' personal data was wrongly provided in a Norinchukin Bank test.

Open in organization search

Sources

  1. [1][Official]当金庫が取り扱うＪＡさっぽろの組合員・利用者の皆様の個人情報漏えい事案の発生について（お詫び）The Norinchukin Bank · 2026-06-30
  2. [2][News]農林中央金庫が個人データ 3,176 件を誤提供、改修テストで本番データ混入ScanNetSecurity · 2026-07-14 08:05