Mitsui Sumitomo: MS Compass breach exposes about 23,000 customer records
About 23,000 MS Compass member, seminar and inquiry records leaked, including names, contacts and company data. The site is closed while investigation continues.
Disclosed
2026-11-09
Organizations involved
1
Leaked or at risk
23K
23,000
Downtime
Unknown
Exposure and response
Unauthorized access detected on 2–3 November exposed about 23,000 records for members, seminar applicants and inquiry-form users. Fields include company names/numbers, positions, personal names, email, phones, industry, office addresses, revenue and employee counts. The November 2023–November 2026 period applies to seminar applications; the notice does not assign it to every category. Cards and bank accounts are excluded; misuse is not confirmed. [1]
Access to part of the system was restricted on 3 November and the entire site temporarily closed on the 6th. No unauthorized access is reported after the 3rd. External specialists are investigating cause and scope, with individual notification planned. No common attack with the policyholder-page or PCS incidents is established, so their counts are not combined. [1]
Timeline
- Detected 2026-11-02
- Disclosed 2026-11-09
- 7 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak][Service outage]
- Entry point
- Web app
Data exposed or at risk
Services hit
Organizations involved
[Breached][Major]Tokyo, ChiyodaFinance and insurance23,000 leaked
Mitsui Sumitomo Insurance Company, Limited
Sources
- [1][Official]MSコンパスへの不正アクセスに伴う情報漏えいについてMitsui Sumitomo Insurance Co., Ltd. · 2026-11-09