Outsourced sign-up system for Sumitomo Life Vitality wellness program breached; data of about 80,000 users leaked and service suspended

NTT Data announced on Nov 9 that the sign-up service for Sumitomo Life's standalone Vitality programs, which it builds and operates under contract, was accessed by a third party and personal data of about 80,000 users leaked ^[1]. Leaked data includes names, addresses, phone numbers, birth dates, emails or partially masked card numbers, and ITmedia reports about 1,000 users had card numbers leaked ^[1][2]. NTT Data says it confirmed the intrusion on Nov 2, blocked external access and suspended the service on Nov 3, and is still investigating the cause ^[1].

Industries mainly affected: Finance, Technology

NTT Data says it confirmed the intrusion on Nov 2, blocked external access and suspended the service on Nov 3, and is still investigating the cause ^[1]