2026 SMBC Consumer Finance — data leak; 320K loan-guarantee records
Data compromised
Up to 320,118 people: name, sex, date of birth, address, home and mobile phones, email, driver-licence number, employer phone and income, contract data (bank code, customer number, guarantee amount, start date). ID-document images not included. No secondary harm reported as of the notice. About 189 partner lenders as of March 2026.
Technical writeup
Official PDF 5 Nov 2026. Partner banks paused some web applications. 320,118 is a maximum.
Root cause
Unauthorised access to the card-loan guarantee system used with partner banks. Detected and blocked 2 November 2026. Data was sent out of the system. Guarantee system paused. Promise-branded lending is on a separate system and is not in this leak, Nikkei reported.