> JapanHacked_
[Resolved][Severity: Critical][Misdelivery]

TOPPAN: Sompo Japan policyholder data sent to another insurer

On 1 September, while manually sending lists for the insurance premium deduction certificate service it runs for non-life insurers, a TOPPAN operator made a drag-and-drop mistake and put a ZIP file with Sompo Japan policyholder data inside a file sent to another insurer. Kana names, deduction policy numbers and job IDs of 177,426 people were included, and the contents were not checked before sending. The recipient deleted the data, and no further leak was found.

Disclosed

2026-09-29

Organizations involved

2

Leaked or at risk

177.4K

177,426

Downtime

Unknown

Timeline

  1. Started 2026-09-01
  2. Detected 2026-09-02
  3. Disclosed 2026-09-29
  4. 28 days

Attack or cause

Method
[Misdelivery]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name]

Supply chain

Organizations listed on this site
2

Organizations involved

Open in organization search

Sources

  1. [1][Official]当社受託「保険料控除証明書 発行サービス 」運用業務における データ誤送付についてTOPPAN · 2026-09-29
  2. [2][News]ドラッグ&ドロップ操作ミスで……TOPPAN、損保ジャパン契約者17万人分のデータを他社に誤送付ITmedia NEWS · 2026-09-30