The Japanese consumer finance company Acom says one of its employees leaked the personal data of about 100,000 customers of a regional bank where the person was working temporarily.
Acom says the employee was working at the Hachijuni Bank in Nagano prefecture. It says the data were obtained and sent it back to the financing company without customers’ consent. They included the names and phone numbers of depositors.
Under the rules of the business tie-up between Acom and the Hachijuni Bank, depositors’ data can only be shared if they have a contract for a card loan service, and have given their consent.
The employee also leaked the data of about 1,800 customers of another bank, the Nagano Bank.
The Nagano Bank is expected to merge with the Hachijuni Bank in 2026.
In addition to names, addresses and phone numbers, the data included outstanding loan information.
Acom said the employee did not properly understand the rules for sharing data. It said the information was not used for business purposes, and has already been deleted.