Zurich data breach: what leaked and what to do
Zurich (zurich.co.jp) had a data breach on 2023-01-08 affecting 756,737 accounts.
!Personal data leaked
Added to the catalogue 23 Jan 2023.
What leaked
- Dates of birth
- Email addresses
- Genders
- Names
- Vehicle details
What happened
In January 2023, the Japanese arm of Zurich insurance suffered a data breach that exposed 2.6M customer records with over 756k unique email addresses. The data was subsequently posted to a popular hacking forum and also included names, genders, dates of birth and details of insured vehicles.
Description from Have I Been Pwned, in its words.
What to do
- Warn staff: emails, texts or calls quoting leaked details are not proof the sender is genuine.
- If card or bank details leaked, watch statements and tell the bank; if identity documents leaked, consider a credit ban or alert.
- Turn on two-factor sign-in on that service and on your email.
Common questions
What leaked in the Zurich breach?
Dates of birth, Email addresses, Genders, Names, Vehicle details
When did the Zurich breach happen?
The breach date is 2023-01-08; it was added to the public catalogue on 2023-01-22.
What should I do if my staff used this service?
Warn staff about emails, texts and calls quoting the leaked details, and watch for sign-in attempts on the services they use.
Was a staff address in this breach?
Check one address free, no storage. Breach Watch checks every staff address after each new breach.