SMBC Consumer Finance attack exposes data at four Japanese banks
A cyberattack on loan guarantee systems operated by SMBC Consumer Finance hit Resona Bank, Kansai Mirai Bank, Minato Bank, and Bank of Yokohama. Resona Group and Bank of Yokohama disclosed linked breaches, with confirmed exfiltration of 5,935 former customer loan records (Resona 139, Kansai Mirai 5,793, Minato 3). Affected customers should be warned about suspicious contacts in their name.
What happened
A cyberattack hit loan guarantee systems operated by SMBC Consumer Finance and affected four Japanese banks: Resona Bank, Kansai Mirai Bank, Minato Bank, and Bank of Yokohama. Resona Group and Bank of Yokohama disclosed linked data breaches. Confirmed exfiltration totals 5,935 former customer loan records.
Why it matters
Customer data from four banks was extracted through a shared loan guarantee system. Affected customers are exposed to fraud and scams in their name. The case shows how one central provider can spread a single incident across several institutions at once.
What to do
Check whether any customers or records are among the affected and warn them about suspicious contacts in their name. Review access and monitoring of third-party-operated guarantee systems.
For the technical team
- Affected
- Sistemas de garantia de empréstimos operados pela SMBC Consumer Finance · Resona Bank (139 records), Kansai Mirai Bank (5,793), Minato Bank (3), and Bank of Yokohama (affected; count not stated in the source). Confirmed total: 5,935 former loan records.
- Exploitation
- Data exfiltration confirmed; Resona Group and Bank of Yokohama disclosed the breaches linked to the cyberattack, per a post by @H4ckmanac on X.
- Fix
- Not applicable; data breach with no software fix mentioned in the source.
- Vector
- Loan guarantee systems operated by SMBC Consumer Finance and used by Japanese banks. Initial vector and exploited flaw not detailed in the source.
- More details
- Disclosure aggregated by @H4ckmanac. The source lists Bank of Yokohama among the affected, but its record count is truncated in the available text.
Timeline
Incident opened.
Sources 1 source
- @H4ckmanac @H4ckmanac
