Osegi
Security·1 min read

NTT Data Breach Exposes 80,000 Sumitomo Life Vitality Users

NTT Data says unauthorized access to a system it runs for Sumitomo Life leaked personal data of about 80,000 Vitality users, including partial card numbers for roughly 1,000.

Illustration of a padlock over a health app screen symbolizing a data breach affecting Vitality program users in Japan.
Image: ITmedia NEWS

NTT Data announced on November 9 that a third party gained unauthorized access to a system it built and operates for Sumitomo Life Insurance, leaking personal information of about 80,000 users. Sign-ups for the affected services have been suspended.

The breach affects current and past users of two standalone Vitality health program offerings: "Sumitomo Life Vitality Trial / Corporate Edition" and "Vitality Smart", including its employee-benefit type.

What was exposed

The leaked data includes names, addresses, phone numbers, dates of birth, email addresses, or credit card numbers with some digits masked. Card numbers were exposed for about 1,000 users. Insurance contract details, Vitality data tied to insurance contracts, and step-count data were not affected.

Timeline and response

NTT Data confirmed the unauthorized access on November 2 in the system used to apply for the two services and reported it to Sumitomo Life the same day. On November 3 it blocked external access and temporarily halted the services. The cause and details are still under investigation.

According to Sumitomo Life, the suspended functions are new applications for the two services, plus cancellations and card-information changes by Vitality Smart users and use of the group management system for the benefit type. The Vitality app and new applications or procedures for "Vitality insurance" are unaffected.

NTT Data is implementing security measures and verifying their effectiveness, and will decide on resuming services once safety is confirmed. As of the announcement date, no misuse of the leaked data had been confirmed.

Both companies urge users to be wary of suspicious calls and emails impersonating NTT Data or Sumitomo Life. Sumitomo Life is identifying affected users and has set up a dedicated inquiry desk.

Apps worth a look

SUMO: the number puzzle

Tap the right tiles, add them up, hit the target. Easy to learn, hard to master. Free, for all ages.

Tags:ntt datasumitomo lifevitalitydata breachunauthorized accessjapan

More from this day

See all →

More in: Security

See all →