NTT Data and Sumitomo Life announced on November 9 that approximately 80,000 individuals' personal information was leaked due to unauthorized access to a system used for applications for Sumitomo Life's health promotion program 'Vitality.' NTT Data was responsible for the system's construction and operation.
The affected individuals are current and past users of 'Vitality Trial Version / Corporate Type' and 'Vitality Smart (including Welfare Benefit Type),' which allow access to the health program separately from insurance contracts. The leaked information includes any of the following: name, address, phone number, date of birth, and email address. For approximately 1,000 of these individuals, credit card numbers with some digits masked were also compromised.
NTT Data confirmed the unauthorized access on November 2 and blocked external access on November 3. New applications for the affected services, self-cancellations and card information changes by Vitality Smart users, and access to the management site for welfare benefit type organizations have all been suspended. The Vitality app, as well as new applications and various procedures for Vitality insurance, remain unaffected.
As of the announcement, no unauthorized use or online publication of the leaked information has been confirmed.
