[Investigating][Severity: Critical][Intrusion]

Suntory: external cloud breach leaks names and emails of about 90,000 employees and other personal data

An external cloud service used by Suntory was accessed without authorization; names and email addresses of about 90,000 group and partner employees and other data leaked.

Disclosed

2026-11-02 15:37

Organizations involved

Leaked or at risk

90K

90,000

Downtime

Unknown

What happened

2026-10-28
Suntory noticed anomalies in an outside cloud service it uses for work, cut off access and began investigating; it identified the names of the files taken. [1]
2026-10-29
It confirmed that some of the files taken contained personal data. [1]
2026-11-02
It filed a preliminary report with the Personal Information Protection Commission and disclosed the leak. NHK reported that the service was a Microsoft cloud service. [1] [4]

Impact

Group	Count	Data
Employees of group companies and partners	about 90,000	Name, email address
Mar de Shine registrants (as of end of 2023)	7,323	Email address
Applicants for Suntory Holdings 2026 graduate hiring	7,173	Name, email address, phone number and more
Suntory Beverage Solution Ltd. company-phone contacts	1,097	Name, phone number
Montebussan Corporation employees and partner-company employees	324	Name, email address, phone number
Izutsu Maisen Co., Ltd. delivery customers and staff	96	Name, delivery location
Suntory Spirits Limited business-partner employees	25	Name, job title

[1]

These are the groups confirmed by 1 November; no payment data is included, and no misuse has been found. [1]

About 90,000 is the largest stated cohort. The groups are not added into an incident-wide total because their overlap has not been stated. [1]

Response

Affected people are being contacted individually. [1]

Timeline

Detected 2026-10-28
Disclosed 2026-11-02
5 days

Attack or cause

Method: [Intrusion]
Impact: [Data leak]
Entry point: Unknown

Data exposed or at risk

[Name][E-mail address][Phone number][Postal address][Employment]

Organizations involved

[Breached][Critical]Osaka, Osaka, KitaManufacturing90,000 leaked
Suntory Holdings Limited
About 90,000 is the cohort of group and partner-company employees, not Suntory Holdings alone or the incident total. Applicant, customer and other cohorts are not added because overlap is unknown.
[Breached][Major]Tokyo, ShibuyaAccommodation, food and drink96 leaked
Izutsu Maisen Co., Ltd.
Names and delivery locations of 96 delivery customers and delivery employees leaked.
[Breached][Major]Tokyo, ShibuyaWholesale and retail trade324 leaked
Montebussan Corporation
Names, email addresses and phone numbers of 324 employees and partner-company employees leaked.
[Breached][Major]Tokyo, MinatoManufacturing
Suntory Beverage & Food Limited
Disclosed jointly with Suntory Holdings.
[Breached][Major]Tokyo, ShinjukuWholesale and retail trade1,097 leaked
Suntory Beverage Solution Ltd.
Names and phone numbers of 1,097 group employees and business contacts stored in two company phones leaked.
[Breached][Major]Tokyo, MinatoManufacturing25 leaked
Suntory Spirits Limited
Names and job titles of 25 business-partner employees leaked.

						Note
Suntory Holdings Limited	[Breached]	[Critical]	Osaka, Osaka, Kita	Manufacturing	90,000	About 90,000 is the cohort of group and partner-company employees, not Suntory Holdings alone or the incident total. Applicant, customer and other cohorts are not added because overlap is unknown.
Izutsu Maisen Co., Ltd.	[Breached]	[Major]	Tokyo, Shibuya	Accommodation, food and drink	96	Names and delivery locations of 96 delivery customers and delivery employees leaked.
Montebussan Corporation	[Breached]	[Major]	Tokyo, Shibuya	Wholesale and retail trade	324	Names, email addresses and phone numbers of 324 employees and partner-company employees leaked.
Suntory Beverage & Food Limited	[Breached]	[Major]	Tokyo, Minato	Manufacturing	Unknown	Disclosed jointly with Suntory Holdings.
Suntory Beverage Solution Ltd.	[Breached]	[Major]	Tokyo, Shinjuku	Wholesale and retail trade	1,097	Names and phone numbers of 1,097 group employees and business contacts stored in two company phones leaked.
Suntory Spirits Limited	[Breached]	[Major]	Tokyo, Minato	Manufacturing	25	Names and job titles of 25 business-partner employees leaked.

Open in organization search

Sources

[1][Official]外部クラウドサービスへの不正アクセスによる個人情報漏えいに関するお詫びSuntory · 2026-11-02
[2][News]【速報】サントリー、個人情報約10万人分漏えいKyodo News · 2026-11-02 15:37
[3][News]【速報】サントリー　不正アクセスで従業員など約9万人分の個人情報が漏えい　採用応募者情報や顧客情報もNTV News · 2026-11-02 15:49
[4][News]サントリーHD 不正アクセスで個人情報約10万人分が漏えいNHK · 2026-11-02 16:23