Vendor breach exposes personal data of 621 Sony Bank customers
SpilloverSpillover from the Securitize Japan incident · View original incident →Securitize Japan, which handles digital securities operations for Sony Bank, was breached, exposing the personal information of 621 Sony Bank customers. Names, addresses, dates of birth, and account numbers were exposed for four customers, while only names were exposed for the remaining 617. Reports indicated that administrator privileges had been seized through an authentication flaw and customer information had been exfiltrated, and digital securities trading was temporarily suspended.
Key facts
- Affected organization
- Sony Bank
- Original incident
- Securitize Japan breach exposes digital securities customer data
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Personal information of 621 customers
- Cause / method
- Seizure of administrator privileges through an authentication flaw at service provider Securitize Japan and exfiltration of customer information
- Location
- Japan
If your data was exposed
Exposed dataNameAddressDate of birthBank account
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
Timeline
- It became known that a breach at a service provider had exposed information on 621 Sony Bank customers and led to the temporary suspension of digital securities trading.
- Reports emerged indicating that administrator privileges had been seized through an authentication flaw and customer information had been exfiltrated.
Original incident
This is spillover from the Securitize Japan incident.
Securitize Japan breach exposes digital securities customer data
9.1KImpact: Customer information leaked, including data on 621 Sony Bank customers and up to 9,086 Marui Group applicants
Customer information for digital securities from several client companies was exfiltrated from Securitize Japan after administrative privileges were seized by exploiting a vulnerability in its authentication functionality. Those affected included 621 Sony Bank customers and up to 9,086 Marui Group applicants, with the exposed data including names, addresses, contact details, dates of birth, investment information and some account information. Client companies including NTT DATA, Sony Bank and Marui Group disclosed the leaks.
Related reports: 2 · last report →
4 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.