損保ジャパン（SMILING ROAD）Data breach / unauthorized access incident
- Occurred on
- October 2, 2026
- Announced on
- October 7, 2026
- Severity
- AFinancial and HR records — information that easily translates into monetary damage.
- Scale
- 60,000 records
- Main impact
- Contact details, workplaces, driver IDs, driving alerts, etc. for a total of approximately 60,000 inquiries handled by the contractor may have been exposed. Account, card, and My Number card information are not affected.
- Information involved
- Email addressUser / member IDPhone numberHome addressFull name
- Cause / key point
- Unauthorized login to the contractor's FAQ system "i-ask" management site and installation of a malicious program.About Abuse of credentials
- Industry
- Finance & insurance
- Listing / capital
- UnlistedParent company: SOMPOホールディングス(東証プライム 8630)
損害保険ジャパン is a subsidiary of SOMPOホールディングス.
- Sources
- Last updated
- October 20, 2026
Stock price reaction to the disclosureSOMPOホールディングス・親会社 / 東証プライム 8630
Stock information is reference data based on Yahoo Finance and may be delayed. This site does not solicit or advise investment and does not guarantee the accuracy or completeness of this information. We accept no liability for any investment decision based on it.
Is this incident worth paying attention to?
Written & reviewed
Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Incidents related to "プログラム"
Incidents where the damage spread through the same service or system.
- Bリンクステーション（GETTIIS会員情報）2026.10.19 announced・Affected Unknown
- SSEストアー(ショップサーブ)2026.10.16 announced・Affected 23,356,000 people
- Aアズマ（hitmart）2026.10.08 announced・Affected Unknown
- Aシチズン時計（問い合わせ管理）2026.10.06 announced・Affected 100,000 people
- Sホワイトエッセンス（予約・基幹システム）2026.10.05 announced・Affected 1,050,000 accounts
- Aアバハウスインターナショナル2026.10.03 announced・Affected Unknown
Same attack method
- A日本経済新聞社(日経)2026.10.16 announced・Affected 1,830,000 records
- Sチャーム本店2026.09.01 announced・Affected 370,000 records
- ACAMPFIRE2026.06.02 announced・Affected 225,846 accounts
- Aウエーブ（Webアップロード）2026.04.01 announced・Affected 176,810 records
- Bイノベーション（GitHub）2026.08.07 announced・Affected 62,689 people
- SPingCAP2026.10.21 announced・Affected 50,000 people
Same industry
- Sアフラック生命保険2026.06.30 announced・Affected 4,400,000 people
- SCSアカウンティング株式会社2026.05.15 announced・Affected Unknown
- Sマネーフォワード（GitHub）2026.05.01 announced・Affected 370 records
- AFivot（IDARE）2026.10.13 announced・Affected 129,659 people
- Aビューカード（VIEW’s NET）2026.10.09 announced・Affected 4,030,000 records
- A大和証券2026.10.05 announced・Affected 220,000 records
Attack method classification: Abuse of credentials(Logging in legitimately with leaked or guessed passwords)
Read the Abuse of credentials guide and national trends →