Life Insurance Association: user data viewable in the policy inquiry system

On 29 July, the Life Insurance Association of Japan said users' personal data could be viewed from outside with certain operations in its Life Insurance Policy Inquiry System, which lets people check whether a relative held life insurance policies. An outside security organization pointed it out on 22 July. Its 14 September report said guest users who were not logged in had been wrongly given permission to see other users' data, from launch on 1 July 2021 until the system was stopped on 27 July 2026. 37,929 records (27,407 people without duplicates) were exposed: names, birth dates, addresses, phone numbers, emails and internal IDs. Outside access was found, but it could not be confirmed that data was actually taken.