www.orcarouter.ai RIZAP Employee Leaks 726 Health Records to AI Chat Service
Article Content
- •726 health records leaked due to employee error at RIZAP Inc.
- •Sensitive data included names, birth dates, and health conditions.
- •Incident recorded in Orca AI incident archive with high severity rating.
On August 20, 2026, an employee at RIZAP Inc. mistakenly uploaded 726 health records to an unauthorized generative AI service. The leaked data included sensitive personal information such as names, dates of birth, and health conditions like hypertension and diabetes, violating Japan's Act on the Protection of Personal Information. The affected individuals were members of the Local Government Employees’ Mutual Aid Association across fourteen regional branches. The association issued a notice on September 4, 2026, confirming the incident. This incident is recorded in the Orca AI incident archive, which rates its severity as high and confirms real harm. There was no external attacker or exploitation of vulnerabilities; the data was mishandled by an employee using an unapproved tool. The case highlights the risks associated with improper data handling in organizations. Current status indicates that both parties involved agree on the incident's mechanism, and it is not flagged as disputed.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Local Government Employees’ Mutual Aid Association in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What type of data was leaked?
Is this incident considered a data breach?
What steps are being taken to prevent future incidents?
Continue Reading
Binance Hack: $6.3 Billion Stolen in Largest Crypto Heist On October 29, 2026, Binance, the world's largest cryptocurrency exchange, reported a major security incident involving an estimated $6.3 billion in stolen funds. The attack was attributed to a compromised laptop belonging to a DevOps engineer, allowing unauthorized withdrawal transactions. Approximately $3 billion in… 
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…