[Investigating][Severity: Critical][Intrusion]

SMBC Consumer Finance: guarantee system breach leaks income and licence numbers of up to 320,000 people

An intrusion into the card loan guarantee system leaked names, employers, income and more for up to 320,118 people, including partner banks' customers. The system is stopped.

Disclosed

2026-11-05

Organizations involved

Leaked or at risk

320.1K

320,118

Downtime

Unknown

What happened

2026-11-02
SMBC Consumer Finance Co., Ltd. detected unauthorized access to the system it uses to guarantee card loans for partner banks and other lenders, and cut off access to it the same day. [1]
2026-11-05
Its investigation found that data sent out of the system contained customers' personal data, and it disclosed the leak. Partner banks announced the effect on their own customers the same day. [1] [2] [3] [5]

Impact

Up to 320,118 people are affected. The data covers name, gender, birth date, address, phone numbers, email address, driving licence number, employer and annual income, and guarantee contract details. ID document images were not included. No secondary harm has been found. [1]

SMBC Consumer Finance Co., Ltd. has stopped the guarantee system while it checks its safety. As a result The Chugoku Bank, Limited stopped web applications, North Pacific Bank, Ltd. stopped new card loans and limit increases, and Tsukuba Bank, Ltd. stopped new card applications. [1] [5] [10] [12]

Partner banks' notices

SMBCCF will contact the affected customers by email or SMS once the scope is known. Each bank's scope is in the organization table. [1] [2]

Bank	People	Details
DOCOMO SMTB Net Bank, Inc.	122,635	Data of up to 122,635 card loan customers leaked.
The Bank of Fukuoka, Ltd.	Not disclosed	Customers and applicants for card loans guaranteed by SMBCCF may be affected; the number is under investigation.
The Kumamoto Bank, Ltd.	Not disclosed	One of the three Fukuoka Financial Group banks whose card loan customers may be affected.
The Juhachi-Shinwa Bank, Ltd.	Not disclosed	One of the three Fukuoka Financial Group banks whose card loan customers may be affected.
The Chugoku Bank, Limited	Not disclosed	Data of its Coreca card loan and free loan customers was included; it stopped web applications for both loans.
The Hiroshima Bank, Ltd.	Not disclosed	Data of card loan applicants leaked; the number is under investigation.
Daishi Hokuetsu Bank, Ltd.	1,307	Up to 1,307 customers who applied for its Benrina 365 loan by September 2020 are affected.
Aichi Bank, Ltd.	1	Data of one customer leaked.
The Ehime Bank, Ltd.	Not disclosed	Confirmed that its customers' data was affected; it stopped applications for the loans concerned.
North Pacific Bank, Ltd.	Not disclosed	Some data of Super Arca card loan customers and applicants leaked; new applications and limit increases were stopped.
The Kiyo Bank, Ltd.	Not disclosed	Was told that its customers' data may have leaked.
Tsukuba Bank, Ltd.	Not disclosed	Was told that customer data leaked; it stopped new applications for its USJOY card.
The Shonai Bank, Ltd.	Not disclosed	Customers of its Q's Pocket card loan are affected; who exactly is being identified.
The Ogaki Kyoritsu Bank, Ltd.	Not disclosed	Some data of card loan applicants leaked (news report).

[2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14]

Timeline

Detected 2026-11-02
Disclosed 2026-11-05
3 days

Attack or cause

Method: [Intrusion]
Impact: [Data leak][Service outage]
Entry point: Unknown

Data exposed or at risk

[Name][Gender][Date of birth][Postal address][Phone number][E-mail address][Employment]

Services hit

[Through a supplier][Critical]
DOCOMO SMTB Net Bank card loan
Customer or applicant data handled by SMBCCF’s guarantee system is affected; this is not an intrusion into the bank’s own system.
[Through a supplier][Major]
Benrina 365
Customer or applicant data handled by SMBCCF’s guarantee system is affected; this is not an intrusion into the bank’s own system.
[Through a supplier][Major]
Chugoku Bank free loan
Customer or applicant data handled by SMBCCF’s guarantee system is affected; this is not an intrusion into the bank’s own system.
[Through a supplier][Major]
Coreca
Customer or applicant data handled by SMBCCF’s guarantee system is affected; this is not an intrusion into the bank’s own system.
[Through a supplier][Major]
My Life Plus (card loan)
Customer or applicant data handled by SMBCCF’s guarantee system is affected; this is not an intrusion into the bank’s own system.
[Through a supplier][Major]
My Life Plus (installment loan)
Customer or applicant data handled by SMBCCF’s guarantee system is affected; this is not an intrusion into the bank’s own system.
[Through a supplier][Major]
Q's Pocket
Customer or applicant data handled by SMBCCF’s guarantee system is affected; this is not an intrusion into the bank’s own system.
[Through a supplier][Major]
Super Arca
Customer or applicant data handled by SMBCCF’s guarantee system is affected; this is not an intrusion into the bank’s own system.
[Through a supplier][Major]
Super Card Loan VIP
Customer or applicant data handled by SMBCCF’s guarantee system is affected; this is not an intrusion into the bank’s own system.
[Through a supplier][Major]
TSUKUBA CARD USJOY
Customer or applicant data handled by SMBCCF’s guarantee system is affected; this is not an intrusion into the bank’s own system.

Service	Role	Impact level	Note
DOCOMO SMTB Net Bank card loan	[Through a supplier]	[Critical]	Customer or applicant data handled by SMBCCF’s guarantee system is affected; this is not an intrusion into the bank’s own system.
Benrina 365	[Through a supplier]	[Major]	Customer or applicant data handled by SMBCCF’s guarantee system is affected; this is not an intrusion into the bank’s own system.
Chugoku Bank free loan	[Through a supplier]	[Major]	Customer or applicant data handled by SMBCCF’s guarantee system is affected; this is not an intrusion into the bank’s own system.
Coreca	[Through a supplier]	[Major]	Customer or applicant data handled by SMBCCF’s guarantee system is affected; this is not an intrusion into the bank’s own system.
My Life Plus (card loan)	[Through a supplier]	[Major]	Customer or applicant data handled by SMBCCF’s guarantee system is affected; this is not an intrusion into the bank’s own system.
My Life Plus (installment loan)	[Through a supplier]	[Major]	Customer or applicant data handled by SMBCCF’s guarantee system is affected; this is not an intrusion into the bank’s own system.
Q's Pocket	[Through a supplier]	[Major]	Customer or applicant data handled by SMBCCF’s guarantee system is affected; this is not an intrusion into the bank’s own system.
Super Arca	[Through a supplier]	[Major]	Customer or applicant data handled by SMBCCF’s guarantee system is affected; this is not an intrusion into the bank’s own system.
Super Card Loan VIP	[Through a supplier]	[Major]	Customer or applicant data handled by SMBCCF’s guarantee system is affected; this is not an intrusion into the bank’s own system.
TSUKUBA CARD USJOY	[Through a supplier]	[Major]	Customer or applicant data handled by SMBCCF’s guarantee system is affected; this is not an intrusion into the bank’s own system.

Open in service search

Organizations involved

[Through a supplier][Critical]Tokyo, MinatoFinance and insurance122,635 leaked
DOCOMO SMTB Net Bank, Inc.
Data of up to 122,635 card loan customers leaked.
[Breached][Critical]Tokyo, KotoFinance and insurance320,118 leaked
SMBC Consumer Finance Co., Ltd.
[Through a supplier][Major]Okayama, Okayama, KitaFinance and insurance
The Chugoku Bank, Limited
Data of its Coreca card loan and free loan customers was included; it stopped web applications for both loans.
[Through a supplier][Major]Aichi, Nagoya, NakaFinance and insurance1 leaked
Aichi Bank, Ltd.
Data of one customer leaked.
[Through a supplier][Major]Fukuoka, Fukuoka, ChuoFinance and insurance
The Bank of Fukuoka, Ltd.
Customers and applicants for card loans guaranteed by SMBCCF may be affected; the number is under investigation.
[Through a supplier][Major]Niigata, Niigata, ChuoFinance and insurance1,307 leaked
Daishi Hokuetsu Bank, Ltd.
Up to 1,307 customers who applied for its Benrina 365 loan by September 2020 are affected.
[Through a supplier][Major]Ehime, MatsuyamaFinance and insurance
The Ehime Bank, Ltd.
Confirmed that its customers' data was affected; it stopped applications for the loans concerned.
[Through a supplier][Major]Hiroshima, Hiroshima, NakaFinance and insurance
The Hiroshima Bank, Ltd.
Data of card loan applicants leaked; the number is under investigation.
[Through a supplier][Major]Nagasaki, NagasakiFinance and insurance
The Juhachi-Shinwa Bank, Ltd.
One of the three Fukuoka Financial Group banks whose card loan customers may be affected.
[Through a supplier][Major]Wakayama, WakayamaFinance and insurance
The Kiyo Bank, Ltd.
Was told that its customers' data may have leaked.

						Note
DOCOMO SMTB Net Bank, Inc.	[Through a supplier]	[Critical]	Tokyo, Minato	Finance and insurance	122,635	Data of up to 122,635 card loan customers leaked.
SMBC Consumer Finance Co., Ltd.	[Breached]	[Critical]	Tokyo, Koto	Finance and insurance	320,118
The Chugoku Bank, Limited	[Through a supplier]	[Major]	Okayama, Okayama, Kita	Finance and insurance	Unknown	Data of its Coreca card loan and free loan customers was included; it stopped web applications for both loans.
Aichi Bank, Ltd.	[Through a supplier]	[Major]	Aichi, Nagoya, Naka	Finance and insurance	1	Data of one customer leaked.
The Bank of Fukuoka, Ltd.	[Through a supplier]	[Major]	Fukuoka, Fukuoka, Chuo	Finance and insurance	Unknown	Customers and applicants for card loans guaranteed by SMBCCF may be affected; the number is under investigation.
Daishi Hokuetsu Bank, Ltd.	[Through a supplier]	[Major]	Niigata, Niigata, Chuo	Finance and insurance	1,307	Up to 1,307 customers who applied for its Benrina 365 loan by September 2020 are affected.
The Ehime Bank, Ltd.	[Through a supplier]	[Major]	Ehime, Matsuyama	Finance and insurance	Unknown	Confirmed that its customers' data was affected; it stopped applications for the loans concerned.
The Hiroshima Bank, Ltd.	[Through a supplier]	[Major]	Hiroshima, Hiroshima, Naka	Finance and insurance	Unknown	Data of card loan applicants leaked; the number is under investigation.
The Juhachi-Shinwa Bank, Ltd.	[Through a supplier]	[Major]	Nagasaki, Nagasaki	Finance and insurance	Unknown	One of the three Fukuoka Financial Group banks whose card loan customers may be affected.
The Kiyo Bank, Ltd.	[Through a supplier]	[Major]	Wakayama, Wakayama	Finance and insurance	Unknown	Was told that its customers' data may have leaked.

Open in organization search

Sources

[1][Official]当社保証システムへの不正アクセスによるお客さま情報の漏えいについてSMBC Consumer Finance · 2026-11-05
[2][Official]ＳＭＢＣコンシューマーファイナンス（保証提携先）への不正アクセスによる当社カードローンのお客さま情報の漏えいについてDocomo SMTB Net Bank · 2026-11-05
[3][Official]SMBCコンシューマーファイナンス株式会社の保証システムへの不正アクセスによるお客さま情報の漏えいについてBank of Fukuoka · 2026-11-05
[4][Official]SMBC コンシューマーファイナンス株式会社の保証システムへの不正アクセスによるお客さま情報の漏えいについてFukuoka Financial Group · 2026-11-05
[5][Official]外部保証会社における不正アクセスにともなう個人情報の漏えいおよびWeb申込受付の一時停止についてChugoku Bank · 2026-11-05
[6][Official]ＳＭＢＣコンシューマーファイナンス株式会社の保証システムへの不正アクセスによる『お客さま情報の漏えい』についてHiroshima Bank · 2026-11-05
[7][Official]個人向けローン「べんリーナ365」の保証業務に関する外部委託先への不正アクセスによるお客さま情報の漏えいについてDaishi Hokuetsu Bank · 2026-11-05
[8][Official]SMBCコンシューマーファイナンス株式会社の保証システムへの不正アクセスによるお客さま情報の漏えいについてAichi Bank · 2026-11-05
[9][Official]提携先（SMBC コンシューマーファイナンス株式会社）に対する不正アクセスによるお客さま情報の漏えいについてEhime Bank · 2026-11-05
[10][Official]カードローン「スーパーアルカ」の外部保証会社における個人情報の漏えいについてNorth Pacific Bank · 2026-11-05