Sony Life hit by attack exposing 385,000 customers' data
Sony Life Insurance discovered unauthorized access on October 27 and blocked external access to the affected systems the next morning. According to the company, the leak includes names, dates of birth, gender, addresses, phone numbers, policy numbers and contract details of about 385,000 customers. Sony Life says the data does not include My Number or credit card information.
What happened
Sony group insurer Sony Life Insurance discovered unauthorized access to its systems on October 27 and blocked external access on the morning of October 28. According to the source, personal data of about 385,000 customers was exposed, including names, addresses, phone numbers, policy numbers and contract details. The company says My Number, credit card and payment bank account data were not affected.
Why it matters
The leak includes policy numbers and contract details, information scammers can use to appear legitimate when approaching insurance customers. The exposure affects about 385,000 customers and creates risk of targeted fraud and notification obligations for the insurer. According to Sony Life, the absence of direct financial data limits immediate banking misuse.
What to do
Treat any contact citing policy numbers or contract details as suspicious, verified through official channels. The company has already blocked external access to the affected systems and there is no software fix to apply. Strengthen identity verification in customer service.
For the technical team
- Affected
- Sony Life Insurance (seguradora do grupo Sony); dados pessoais de cerca de 385 mil clientes · Sony Life Insurance corporate systems holding customer data; software products and versions are not specified in the source.
- Exploitation
- The source describes no active exploitation, attributed group or PoC; it only records the unauthorized access discovered on October 27.
- Fix
- No software fix cited; the mitigation applied was blocking external access to the affected systems.
- Vector
- Unauthorized access to Sony Life Insurance systems; the technical vector is not described in the source. In response, the company blocked external access to the affected systems on the morning of October 28.
- More details
- Exposed data, per the source: names, dates of birth, gender, addresses, phone numbers, insurance policy numbers and contract details of about 385,000 customers. Sony Life says the leak does not include My Number, credit card details or bank account information used for insurance payments. Single source: a post on social network X by the account @Pirat_Nation.
Timeline
Incident opened.
Sources 1 source
- @Pirat_Nation @Pirat_Nation
