Breach · · 4 min read
Roadside assistance records for up to 5.5 million cases leaked in Japan, including some bank details
Prestige International says an intruder took data from the system its subsidiary uses to arrange roadside help for insurers and other clients: names, addresses, vehicles and some bank accounts.
If you’ve ever called for a tow or a jump start through your car insurance in Japan, the call may have been handled by a company you’ve never heard of. Prestige International said on November 2, 2026 that someone broke into the system its subsidiary uses to take and arrange those calls, and took customer information. It counts up to about 5.5 million cases. Here’s what the company has said.
What happened
According to Prestige International’s notice (in Japanese, PDF), it detected unauthorized access to a group business system on October 29, 2026 and disabled the login details that had been misused. The access continued, so it shut the system down on October 30. The system is the one its subsidiary, Prestige Core Solution, uses to take and arrange roadside assistance and similar calls for the companies that hire it.
The information taken belongs to customers who used those clients’ roadside services. It includes:
- name
- home address
- phone number
- email address
- vehicle details, such as the registration number and the chassis number
- details recorded when the accident or breakdown was reported
- bank account details, for some people
The company says up to about 5.5 million cases are affected. That figure includes duplicates, and it’s still working out how many people that is. It says it hasn’t found any credit card details among the leaked data, and that some information about its partner companies may also be included. It is investigating with outside specialists, is reporting to Japan’s Personal Information Protection Commission and is consulting the police. It says it hasn’t seen any misuse so far.
Which insurers are involved
Prestige International hasn’t listed its clients. It says it will decide how to contact affected customers together with them. Sony Assurance (Sony Sonpo), which hires Prestige Core Solution for the roadside service in its car insurance, said (in Japanese) on November 2 that it was told about the break-in at about 11 a.m. on October 30. It says only cases it handed to Prestige may be affected, and that it is still waiting to hear whether its customers’ data was taken. It opened a hotline for its policyholders, 0120-278-300 (9 a.m. to 6 p.m., weekends and holidays included). Prestige says roadside help continues while the system is down, though Sony Assurance says its roadside line is hard to get through to right now.
What this means for you
A scammer who knows your name, your car, its plate and that you once had a breakdown can tell a very believable story: a follow-up from your insurer, a refund on a past tow, or a problem with your policy. Some people’s bank account details are also in the data, which makes a fake request to “confirm your account for a refund” more convincing. Prestige says it and its group companies will never ask for passwords or bank PINs by phone or email about this.
What you can do
- Watch for a notice from your car insurer or roadside service. Prestige is working out with its clients how to tell affected people.
- Be wary of calls, emails and texts about a past tow, a refund or your policy, even if they know your car. Hang up and call your insurer on the number on your policy documents or its website.
- Never give out a bank PIN, password or card number to someone who contacts you, whoever they say they are.
- Keep an eye on your bank account for payments you don’t recognize, and tell your bank if you see any.
- Learn the patterns. See how scammers use leaked data.
How Frame helps
Add this breach to a verified email in Frame and Frame shows what it exposed, gives you a short checklist and counts it in your exposure report. Frame can also look up your verified emails in Have I Been Pwned’s breach database. Frame never collects or stores the leaked records themselves.
Sources
- Prestige International, 当社グループの業務システムへの不正アクセスによる個人情報漏えいに関するお知らせとお詫び (in Japanese, PDF), November 2, 2026
- Sony Assurance, 当社の委託会社の業務システムへの不正アクセスについて (in Japanese), November 2, 2026
- Japan IR, Prestige International Inc. Notice of Personal Information Leakage Due to Unauthorized Access, November 2, 2026
- TBS NEWS DIG, ロードサービス事業 最大約550万件の情報流出 車両情報や口座番号など 不正アクセスで (in Japanese), November 2, 2026
New posts, by email.
About once a month. Plain-language privacy notes, nothing else. I never share your address.