SMBCコンシューマーファイナンスData breach / unauthorized access incident
- Occurred on
- November 2, 2026
- Announced on
- November 5, 2026
- Severity
- SCompromise of deep personal data or usable credentials.
- Scale
- 320,118 people
- Main impact
- Unauthorized access to the system used for warranty operations resulted in up to 320,118 individuals' personal data being sent externally. Partner financial institutions were also affected; ドコモSMTBネット銀行 could have up to 122,635 individuals impacted.
- Information involved
- Full nameDate of birthHome addressPhone numberEmail addressUser / member IDIdentity verification data
- Cause / key point
- Data is said to have been sent externally due to unauthorized access by a third party, but the intrusion route and detailed methods are still under investigation and have not been disclosed.
- Industry
- Finance & insurance
- Sources
- Last updated
- November 6, 2026
Where to go for this information
The steps themselves are on the protection guide. These links match the kinds of data in this incident, plus support contacts.
Ask AI about this incident
Opens an AI chat with this page's URL already in the prompt. Treat the answer as a starting point — always verify with the official sources listed above.
Is this incident worth paying attention to?
Written & reviewed
Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Same attack method
- A佐川急便（お荷物問い合わせ）2026.10.01 announced・Affected 53,230,000 records
- SSソースネクスト2026.10.15 announced・Affected 22,519,960 records
- SSバーガーキング・ジャパン(公式アプリ)2026.10.15 announced・Affected 11,180,000 records
- SS焼肉きんぐ2026.10.05 announced・Affected 10,788,963 records
- Bモスフードサービス（モス WEB 会員）2026.11.04 announced・Affected 7,500,000 records
- SSタイムズカー(タイムズモビリティ)2026.09.25 announced・Affected 6,600,000 accounts
Same industry
- Sアフラック生命保険2026.06.30 announced・Affected 4,400,000 people
- SCSアカウンティング株式会社2026.05.15 announced・Affected Unknown
- Sマネーフォワード（GitHub）2026.05.01 announced・Affected 370 records
- A楽天証券2026.10.31 announced・Affected 362 records
- Aライフカード2026.10.28 announced・Affected 339,610 records
- Aソニー生命保険2026.10.28 announced・Affected 385,000 records
Attack method classification: Unauthorized access (method undisclosed)(Breached, but the technique was not identified or disclosed)
Read the Unauthorized access (method undisclosed) guide and national trends →