Sony Life Insurance data breach

What happened

Sony Life Insurance, a Japanese life insurer in the Sony Financial Group, said on October 28, 2026 that outsiders had broken into systems including its policyholder website, found on October 27. Its first notice covered about 385,000 records of policyholders and insured people on Medicare Life policies it sold as an agent, including names, dates of birth, gender, addresses, phone numbers, policy numbers and contract details. In a second notice on November 9 it said the same intrusion also leaked about 2.9 million records from its own insurance policies (policy numbers, names, addresses, phone numbers and similar details, including policies that have already ended), plus the email addresses and ID numbers of about 780 sales agents and about 12,500 employees. Health and medical history, My Number, credit card and bank account details were not included in the second batch, and no misuse had been confirmed as of November 9. The policyholder website, the Sony Life app and several online services remain suspended.

What should I do?

1. Be wary of calls, emails and texts that quote your policy number or contract details; Sony Life says it never asks for passwords, PINs or one-time codes by email or phone.
2. Don't open links or attachments in unexpected messages about claims, refunds or contract changes; contact Sony Life's dedicated line (0120-833-344) or your agent if unsure.
3. If you're told of a contract change or procedure you didn't request, report it to Sony Life straight away.
4. Note the number, time and content of any suspicious call, as Sony Life asks, and don't confirm personal details to the caller.

More data breaches in Japan →

Check the other services you use →