SHINDO2

Nishi-Nippon City Bank

Personal data7people

LEAK CONFIRMEDFull nameInsider misuse · Closed (final report)

Open in the live monitor ▶
Disclosed
Apr 30, 2026
Leak
Leak confirmed
Type
Insider misuse
Status
Closed (final report)
Security spend
Not checked yet
Compensation
Not announced

What leaked

IdentityCustomer names (written on a whiteboard in the back office)

How many

  • Personal data such as names of seven customers 7 people

Who is affected

  • Customers

Cause

An employee filmed inside a branch back office and posted videos and images on social media, where they spread

Timeline

  1. Security NEXT report date; the organization's own announcement date was not confirmed

Response

  • Notified individuals
  • Staff training
  • Governance / committee

Explained and apologized to each affected customer; will enforce compliance and information management to prevent recurrence

What you should do

  1. Check the company's notice to see if you're affected

Lessons for companies

  1. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  2. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources