Mitsui Direct General Insurance: unauthorized access leaks about 234,000 customer records

The insurer detected unauthorized website access early on 4 November and stopped all web/app procedures. Up to 234,000 records leaked, including policyholder/named-insured names, addresses, birth dates, phones, emails, vehicle data, contract terms and coverage. Card numbers, bank-account numbers and other payment details, and My Page login passwords did not leak. Procedures remained stopped at 13:00 on 6 November, with no reopening date. [2]

According to the Asahi Shimbun, MS&AD group member Mitsui Direct General Insurance Co., Ltd. announced on 6 November that a separate unauthorized access, distinct from the one on the policyholder pages of Mitsui Sumitomo Insurance and others, leaked about 234,000 customer records. They include names, addresses, vehicle details and policy terms. No misuse has been confirmed. [1]