NTT DATA: Sumitomo Life Vitality contractor-system breach exposes about 80,000 users’ data

Unauthorized access was identified on 2 November in application services built/operated by NTT DATA, with external access blocked on 3 November. About 80,000 current/former users of standalone Vitality Trial/Corporate and Vitality Smart, including employee-benefit plans, are affected. Names, addresses, phones, birth dates, email or partly masked card numbers leaked. Card-number exposure concerns about 1,000 people; the notices do not report full card-number exposure. [1] [2]

Insurance contracts, insurance-linked Vitality and activity data such as step counts are excluded. Since 3 November, affected plans’ new applications, Smart self-service cancellation/card changes and corporate benefit administration are stopped. The Vitality app and Vitality insurance applications/procedures are unaffected. Investigation and safety checks for reopening continue; misuse or internet publication is not confirmed. [1] [2]