Science & Tech · Cybersecurity · 6 hrs ago
Data breach at NTT Data system affects about 80,000 Vitality users
NTT Data said an unauthorized access incident exposed information from a system it runs for Sumitomo Life Insurance in Japan.
The affected users are current and former customers of two services linked to Sumitomo Life’s Vitality health programme.
The exposed information may include names, addresses, phone numbers, birth dates, email addresses and partly masked credit card numbers.
About 1,000 users had card numbers exposed, but insurance contract details and Vitality data such as step counts were not included.
NTT Data found the access on November 2, reported it to Sumitomo Life and blocked outside access the next day, suspending some services.
New sign-ups for the affected services and some account changes are stopped, while the Vitality app and applications for Vitality insurance are not affected.
No misuse of the exposed information has been confirmed; the companies are investigating, and services will resume only after security measures are checked.
NTT Data said a system it operates for Sumitomo Life was accessed without authorization, exposing personal information belonging to about 80,000 Vitality users.
The affected users include current and former users of two services, Vitality trial and corporate plans and Vitality Smart.
Exposed information may include names, addresses, phone numbers, dates of birth, email addresses and partially masked credit card numbers.
About 1,000 users had credit card numbers exposed, while insurance contract details and Vitality data such as step counts were not involved.
Some applications and account-management functions have been suspended while NTT Data investigates and checks security measures.
- Who
- About 80,000 current and former users of two Sumitomo Life Vitality services were affected.
- What
- Unauthorized access to an NTT Data-operated system exposed personal information. About 1,000 users’ partially masked credit card numbers were included.
- When
- NTT Data detected the unauthorized access on November 2 and announced the breach on November 9.
- Where
- A system NTT Data built and operates for Sumitomo Life in Japan.
- Why
- The cause and detailed circumstances of the unauthorized access are still under investigation.
This story does not have two clearly opposing sides.
NTT Data detected unauthorized access to the system used for applications to the two services and reported it to Sumitomo Life.
External access was blocked and the services were temporarily suspended.
NTT Data announced that personal information belonging to about 80,000 users had been exposed.
- Affected users
- About 80,000 current and former users
- Credit card numbers exposed
- About 1,000 users; numbers were partially masked
- Affected services
- Sumitomo Life Vitality trial and corporate plans; Vitality Smart
- Data not involved
- Insurance contract information and Vitality data such as step counts
- Service status
- Some applications and account-management functions are suspended