A RIZAP Employee Uploaded 726 People’s Health Records to a Personal AI Chat

On 20 August 2026 an employee of RIZAP Inc., the Japanese fitness and health-guidance group, was pulling records out of the health-guidance management system it operates for insurers when the data went into a generative AI service on a personal account the company had never approved. The records covered 726 members of the Local Government Employees’ Mutual Aid Association (地方職員共済組合) across fourteen regional branches, and included names, dates of birth, insurance-card symbols and numbers, and the disease categories hypertension, diabetes and dyslipidaemia — sensitive personal data under Japan’s Act on the Protection of Personal Information. The association published its notice on 4 September 2026. The case sits among the documented incidents in the Orca AI incident archive, which records each entry with its own sources, severity, confidence grade and disputed flag. This was not a breach in the usual sense. No attacker, no compromised credential, no vulnerability being exploited. A person doing routine aggregation work chose the wrong tool, and a health insurer’s member data — including the category Japanese law treats as needing the strictest handling — left the building through a browser tab that nobody at the company knew existed. The archive grades the record at its top confidence level, rates its severity high, records real harm and does not flag it as disputed, and both of the parties who published notices agree on the mechanism. What follows separates what those notices establish from what rests on the vendor’s own assurances.

On 20 August 2026 an employee of RIZAP Inc., the Japanese fitness and health-guidance group, was pulling records out of the health-guidance management system it operates for insurers when the data went into a generative AI service on a personal account the company had never approved. The records covered 726 members of the Local Government Employees’ Mutual Aid Association (地方職員共済組合) across fourteen regional branches, and included names, dates of birth, insurance-card symbols and numbers, and the disease categories hypertension, diabetes and dyslipidaemia — sensitive personal data under Japan’s Act on the Protection of Personal Information. The association published its notice on 4 September 2026. The case sits among the documented incidents in the Orca AI incident archive, which records each entry with its own sources, severity, confidence grade and disputed flag.

This was not a breach in the usual sense. No attacker, no compromised credential, no vulnerability being exploited. A person doing routine aggregation work chose the wrong tool, and a health insurer’s member data — including the category Japanese law treats as needing the strictest handling — left the building through a browser tab that nobody at the company knew existed. The archive grades the record at its top confidence level, rates its severity high, records real harm and does not flag it as disputed, and both of the parties who published notices agree on the mechanism. What follows separates what those notices establish from what rests on the vendor’s own assurances.