SHINDO3

Gibraltar Life

The Gibraltar Life Insurance Co., Ltd.

Customers71people

LEAK CONFIRMEDDate of birth / Full nameInsider misuse · Contained

Open in the live monitor ▶
Disclosed
May 13, 2025
Leak
Leak confirmed
Type
Insider misuse
Status
Contained
Security spend
Not checked yet
Compensation
Not announced

What leaked

IdentityFull name, Date of birth
Transactions & activityInsurance product name
Financial & paymentPremiums, premiums paid, surrender values, etc.

How many

  • Customers 71 people

Who is affected

  • Customers handled by the former employees

Cause

Four former employees of the Kitakyushu branch who left by March 2024 for the same insurance agency are suspected of taking their customers' data. After they left, a clerical employee leaked some customer data at the request of three of them

Timeline

  1. When the four former employees left
  2. Date of the Security NEXT report

Response

  • Notified individuals
  • Staff training
  • Governance / committee

Explained to affected customers and apologized. Will strengthen staff training and technical safeguards against taking customer data out. The current employee who leaked data was dismissed

What you should do

  1. Check the company's notice to see if you're affected

Lessons for companies

  1. Don't keep ID or bank data: delete after checks or use a KYC provider
  2. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  3. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources