Suntory says files with details of about 100,000 people were taken from a cloud service

Suntory Holdings and Suntory Beverage & Food said on November 2, 2026 that someone got into an outside cloud service the Suntory group uses and downloaded files, and that some of those files held personal information. The company counts about 100,000 people in total. Most are employees, but a few groups of customers and job applicants are included. Here’s what Suntory has said and who it reaches.

What happened

According to Suntory’s notice (in Japanese), the company noticed something wrong in the cloud service on October 28, cut off the access the same day and identified which files had been taken. On October 29 it confirmed that some of those files contained personal information. The notice only calls it an “external cloud service.” Nikkei (in Japanese) and Kyodo News report that it was Microsoft’s cloud service.

Suntory lists seven groups whose information it had confirmed as leaked by November 1:

• about 90,000 employees of the Suntory group and partner companies: name and email address
• 7,323 people registered for its “Mal de Shine” company experience program as of the end of 2023: email address
• 7,173 applicants to Suntory Holdings’ 2026 new-graduate business track (early and regular open selection): applicant page details, including name, email address and phone number
• 1,097 people saved in two work phones at Suntory Beverage Solution: name and phone number
• 324 employees of Monte Bussan and its partner companies: name, email address and phone number
• 96 people who ordered home delivery from Izutsu Maisen, plus the staff who delivered: name and delivery location
• 25 employees of Suntory’s business partners: name and job title

Suntory says no credit card or other payment details were included, and that it hasn’t found any misuse of the information so far. It reported the leak to Japan’s Personal Information Protection Commission on November 2 and started contacting the people affected that day. Nikkei reports that Suntory doesn’t yet know who was behind it and hasn’t received any ransom demand or threat. The investigation is still going, so the groups or numbers could change.

What this means for you

If you signed up for Mal de Shine before the end of 2023, applied to Suntory’s 2026 graduate business track, or ordered a Maisen home delivery, your details may be in these files. What leaked is mostly names, emails and phone numbers, which is the kind of information used for convincing phishing rather than for getting into accounts directly. Nothing here gives someone your password or card.

What you can do

1. Look for Suntory’s own message if you think you’re in one of the groups above. It started reaching out on November 2.
2. Treat unexpected emails about Suntory, recruiting or deliveries with care, especially ones that ask you to sign in, pay a fee or confirm personal details. Open the company’s site yourself instead of using a link.
3. Never share passwords, card numbers or verification codes with someone who contacts you about this.
4. Ask Suntory directly if you have questions, through the contact form or toll-free number on its notice.
5. Learn the patterns. See how scammers use leaked data.

How Frame helps

Add this breach to a verified email in Frame and Frame shows what it exposed, gives you a short checklist and counts it in your exposure report. Frame can also look up your verified emails in Have I Been Pwned’s breach database. Frame’s email aliases let you give each company or sign-up its own address, so one leak doesn’t reach everything. Frame never collects or stores the leaked records themselves.

Sources

• Suntory Holdings and Suntory Beverage & Food, 外部クラウドサービスへの不正アクセスによる個人情報漏えいに関するお詫び (in Japanese), November 2, 2026
• Nikkei, サントリーHD、10万人分の個人情報漏洩　不正アクセスで (in Japanese), November 2, 2026
• Kyodo News, Suntory Holdings says personal data of around 100,000 people leaked, November 2, 2026
• NHK, サントリーHD 不正アクセスで個人情報約10万人分が漏えい (in Japanese), November 2, 2026