TOKYO - Leading beverage manufacturer Suntory Holdings Ltd. on Monday joined a growing list of firms reporting personal data leaks, saying information relating to around 100,000 people, including employees, was leaked following unauthorized access to an external cloud service used by the group.
Suntory said it has not confirmed any misuse of the information and that the leaked data included names and email addresses of about 90,000 employees of group companies and affiliated firms.
It also said the leak included email addresses of around 7,300 people registered for its corporate activities experience program as of the end of 2023 and names of approximately 7,200 applicants for its 2026 new graduate recruitment process.
The company detected unusual activity in Microsoft's cloud service on Wednesday, prompting it to block the unauthorized access.
Japanese IT company Paycloud Holdings Inc. also said that about 77 million email addresses were leaked in a cyberattack on a subsidiary that operates an email distribution service.
The leaked information also included names, gender and dates of birth of customers registered by client companies. No credit card numbers were included.
The company said the figure does not represent the number of people affected, as some individuals may have multiple email addresses.
Unauthorized access to a server for the Arara Message service, operated by Paycloud Holdings subsidiary Arara Inc., led to the leak of registered information from up to around 380 client companies.
Arara confirmed that the messaging service was misused to send approximately 7.13 million emails posing as messages from credit card companies to external addresses.
The service has been suspended since Saturday, and the company will assess system security and other factors before deciding whether to resume operations.
Electronics retailer Nojima Corp. said that personal information of around 7 million registered customers had been leaked after unauthorized access to its e-commerce site's member management system. The leaked information included names and addresses.
Marui Group Co. said that personal information of up to 9,086 people who applied for digital bonds was leaked due to unauthorized access to a company it had contracted to manage the bonds.
The leaked data may include bank account numbers for 54 of the applicants, said Marui Group, which operates retail and fintech businesses.
