car insurance

Prestige International Road Service System Breach (Up to About 5.5 Million Records, Including Duplicates): Names, Vehicle Data, Some Bank Account Data and 3 Card Numbers Taken, and What Insurance and Lease Customers Should Do

Prestige International Co., Ltd. announced on November 2, 2026 that the system of its group company Prestige Core Solutions, which handles road service reception and dispatch for client companies, was accessed without authorisation and customers' personal data was taken out. The count is up to about 5.5 million records, duplicates included; the number of unique people is still being checked. The items are names, addresses, phone numbers, email addresses, vehicle information (registration and chassis numbers and similar), accident and breakdown reception information, and, for part of the records, bank account information. No credit card leak was confirmed in the November 2 notice, but in a second report on November 6 the company confirmed that 3 credit card numbers were among the data taken (recorded in part of the system's reception records). It has contacted the issuers of those cards and will contact the customers after talks with the issuers. The company detected the access on October 29 and invalidated the misused credentials, but the access continued, so it stopped the system on October 30. Road service continues through an alternative operation. Sony Sonpo, AXA Direct Insurance, ENEOS (car lease) and KDDI (au Bicycle Support) have each published their own notices about their customers. Our conclusion: people who used road service through an insurance or lease contract, or au Bicycle Support, should open their own provider's official notice themselves, and should not click links in calls, texts or emails that talk about their vehicle or an accident. If you used a credit card, check your statement and contact the card company about any charge you do not recognise.