LENDY Servicing: negotiation-record system breached; data on 211 Okinawa Bank customers may leak
An outsider created an account and viewed repayment-negotiation records. Data on 211 Okinawa Bank customers may have leaked, including contacts and amounts. The system is isolated.
Disclosed
2026-11-06
Organizations involved
2
Leaked or at risk
211
211
Downtime
Unknown
Affected system and information
On 30 October an outsider created an unauthorized account in LENDY Servicing’s negotiation-record checker and viewed records. Outside extraction is considered likely; 211 Okinawa Bank Checkit customers are affected. Potential fields are names, emails, phones, representatives such as lawyers, repayment-consultation amounts and negotiation contents, in whole or part. Inclusion of each field is being checked. [1]
Controls restricting outside registration and each user’s accessible data were inadequate. The company disabled accounts, terminated sessions, stopped registration and isolated/stopped the system. This is an auxiliary system, rather than the main debt-management/collection system. No misuse-related harm is confirmed. [1]
Timeline
- Started 2026-10-30
- Disclosed 2026-11-06
- 7 days
Attack or cause
- Method
- [Intrusion][Web app exploit]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Supply chain
- Organizations listed on this site
- 2
Services hit
Organizations involved
[Through a supplier][Major]Okinawa, NahaFinance and insurance211 leaked
The Bank of Okinawa, Ltd.Negotiation records for 211 Checkit customers subject to collection are affected. The bank’s systems were not breached.
[Breached][Major]Tokyo, MinatoFinance and insurance
LENDY Servicing Co., Ltd.An internal auxiliary negotiation-record checker is affected. No provider-wide client total is published.
Sources
- [1][Official]個人ローン商品「チェキット」にかかる個人情報の漏えいに関するお詫びとお知らせThe Bank of Okinawa · 2026-11-06