Mainichi.Jp SMBC Consumer Finance Data Breach Exposes Information of 320,000 Customers
Article Content
- •Unauthorized access to SMBC's loan guarantee system exposed data of over 320,000 customers.
- •Leaked information includes sensitive personal details, but no identification images were compromised.
- •The breach is part of a larger trend of data breaches affecting multiple Japanese companies.
On November 5, 2026, SMBC Consumer Finance reported a data breach affecting up to 320,118 customers due to unauthorized access to its loan guarantee system. The leaked data includes names, addresses, phone numbers, driver's license numbers, annual incomes, and contract details, but not images of identification documents. The breach was detected on November 2, and immediate action was taken to block access to the system. The company is working with experts to investigate the incident and assess the impact. No confirmed secondary harm has been reported, but customers are warned about potential phishing attempts. Affected individuals will be notified via email or SMS. This incident is part of a broader trend of data breaches affecting Japanese companies, including other firms linked to the email distribution service provider Arara Inc.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Docomo SMTB Net Bank in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What types of data were leaked?
How many customers are affected?
What should customers do now?
Continue Reading
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…