TOPPAN: Sompo Japan policyholder data sent to another insurer
On 1 September, while manually sending lists for the insurance premium deduction certificate service it runs for non-life insurers, a TOPPAN operator made a drag-and-drop mistake and put a ZIP file with Sompo Japan policyholder data inside a file sent to another insurer. Kana names, deduction policy numbers and job IDs of 177,426 people were included, and the contents were not checked before sending. The recipient deleted the data, and no further leak was found.
Disclosed
2026-09-29
Organizations involved
2
Leaked or at risk
177.4K
177,426
Downtime
Unknown
Timeline
- Started 2026-09-01
- Detected 2026-09-02
- Disclosed 2026-09-29
- 28 days
Attack or cause
- Method
- [Misdelivery]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Supply chain
Organizations involved
[Through a supplier][Critical]Tokyo, ShinjukuFinance and insurance177,426 leaked
Sompo Japan Insurance Inc.[Breached][Critical]Tokyo, TaitoManufacturing177,426 leaked
TOPPAN Inc.
Sources
- [1][Official]当社受託「保険料控除証明書 発行サービス 」運用業務における データ誤送付についてTOPPAN · 2026-09-29
- [2][News]ドラッグ&ドロップ操作ミスで……TOPPAN、損保ジャパン契約者17万人分のデータを他社に誤送付ITmedia NEWS · 2026-09-30