> JapanHacked_
[Investigating][Severity: Critical][Intrusion]

Tokio Marine Direct: My Page breach leaks policyholder data

An intrusion into the policyholder My Page and related services leaked personal data for 74 contracts. All web procedures are stopped.

Disclosed

2026-11-05

Organizations involved

1

Leaked or at risk

74

74

Downtime

Unknown

What happened

  1. Tokio Marine Direct Insurance Co., Ltd. detected suspicious access to My Page (Tokio Marine Direct) and blocked the IP addresses involved. [1]

  2. The investigation found traces of unauthorized access, and it disclosed that policyholder data stored in My Page and related services had leaked. [1]

Impact

My Page and the official app are affected, with 74 contracts known so far. The data includes names, addresses, birth dates, phone numbers and email addresses of policyholders and main drivers, policy numbers, car and cover details, and records of claims and enquiries. Those records may include data on the other party in an accident, injuries and bank accounts. No misuse or malware infection has been found. [1]

Because it cut the connection to the service used for the intrusion, all web procedures for its &e car insurance and docomo car insurance are stopped. New quotes and applications are stopped too, and procedures are taken by phone. The cause and scope are under investigation. [1]

Timeline

  1. Detected 2026-11-04
  2. Disclosed 2026-11-05
  3. 1 days

Services hit

Open in service search

Organizations involved

Sources

  1. [1][Official]当社Webサービスへの不正アクセスに伴う個人情報の漏えいに関するお詫びとお知らせTokio Marine Direct Insurance · 2026-11-05