(Re)in Summary
- Sompo Japan warned that approximately 60,000 customer inquiries may have been exposed following unauthorised access to a third-party service provider’s server.
- Potentially compromised information includes names, contact details, employment information, driving alert records and inquiry contents, but excludes bank account and credit card details.
- No misuse or online exposure of customer information has been confirmed. Sompo Japan is investigating the incident and reviewing its oversight of external service providers.
Sompo Japan Insurance has warned that information linked to approximately 60,000 customer inquiries may have been exposed following unauthorised access to a server operated by an external service provider.
In a statement on 7 October, the Japanese insurer said the incident involved a system operated by Scala Communications, which handles customer inquiries for SMILING ROAD, its connected dashboard camera service for corporate clients.
Sompo Japan was notified of the potential breach on 3 October, a day after the unauthorised access began.
According to Scala Communications, the intrusion occurred between approximately 8:33 p.m. on 2 October and 8:01 a.m. on 3 October. The vendor subsequently implemented emergency measures, including blocking the unauthorised access route.
The approximately 60,000 potentially affected inquiries include multiple submissions from the same customers, meaning the figure does not represent the number of individuals affected.
Potentially exposed information includes names, addresses, telephone numbers, email addresses, employer details, driver identification numbers, driving alert information, including alert types and timestamps, device information and inquiry contents.
However, the insurer said bank account details, credit card information and Japan’s My Number identification card data were not included.
Sompo Japan said the potentially affected information was limited to data stored on the external provider’s server, adding that no unauthorised access to its own systems had been confirmed.
As of its 7 October announcement, the insurer had not identified any misuse of customer information or evidence that the affected data had been published or distributed online.
The company said it would contact potentially affected customers individually where possible and warned that exposed information could be used for fraudulent calls or emails impersonating the insurer or related parties.
Sompo Japan will continue monitoring for potential data exposure while working with Scala Communications to investigate the cause of the breach.
It also plans to review its oversight of outsourced service providers and determine additional safeguards and implementation timelines to prevent similar incidents.
The latest disclosure follows a separate potential data breach reported by Sompo Japan back in June 2025, when the insurer warned that millions of customer and agent records may have been exposed.
More recently, Aflac Japan confirmed a data breach in June 2026 affecting approximately 4.4 million customers, including around 220,000 whose premium payment account information was exposed.
