---
title: 'Suntory Holdings breach exposes personal data on about 100,000 people'
url: 'https://securteksecurity.com/news/suntory-holdings-breach-about-100000-people'
markdown: 'https://securteksecurity.com/news/suntory-holdings-breach-about-100000-people.md'
date: '2026-11-02'
description: 'Suntory Holdings said on November 2, 2026 that a third party gained unauthorized access to an external cloud service used by the Suntory Group, detected an anomaly on October 28, blocked the access, and confirmed on October 29 that files containing personal information had been downloaded. Kyodo Ne…'
taxonomy:
  category:
    - Breaches
  tag:
    - japan
    - food-and-beverage
---

# [Suntory Holdings breach exposes personal data on about 100,000 people](https://securteksecurity.com/news/suntory-holdings-breach-about-100000-people)

   2nd Nov 2026   [japan](https://securteksecurity.com/tag:japan#body-wrapper) [food-and-beverage](https://securteksecurity.com/tag:food-and-beverage#body-wrapper)  

Suntory Holdings said on November 2, 2026 that a third party gained unauthorized access to an external cloud service used by the Suntory Group, detected an anomaly on October 28, blocked the access, and confirmed on October 29 that files containing personal information had been downloaded. Kyodo News, reporting the disclosure, said the service was a Microsoft cloud service and put the total at about 100,000 people. Suntory listed the confirmed categories as of November 1 as: about 90,000 Suntory Group and partner company employees (names and email addresses); 7,323 people registered at the end of 2023 for its Maru de Shine corporate experience program (email addresses); 7,173 applicants to Suntory Holdings 2026 graduate business recruitment (names, email addresses, phone numbers and other registration details); 1,097 contacts held on two company phones; 324 Monte Bussan employees and partner employees; 96 delivery customers and staff; and 25 business partner employees.

Suntory said no credit card or other payment information was included, that no misuse of the information has been confirmed so far, that it reported the leak to Japan's Personal Information Protection Commission on November 2, and that it has begun notifying affected individuals. Because the largest category is itself stated as about 90,000, SecurTek counts this breach at the reported total of about 100,000 people and does not sum the approximate categories into a derived total; the item will be updated if Suntory publishes a revised figure.

Sources: [Suntory Holdings](https://www.suntory.co.jp/note/detail/261102_008203.html); [Kyodo News via NTT Docomo Topics](https://topics.smt.docomo.ne.jp/article/kyodo_nor/business/kyodo_nor-2026110201001099)

---

## Navigation

- Parent: [News](https://securteksecurity.com/news.md)
- Previous: [Stripe Link agent purchases rose 38-fold in September, Upstarts Media reports](https://securteksecurity.com/news/stripe-link-agent-purchases-38-fold-september.md)
- Next: [Sweden Government Offices block ChatGPT and Claude on work computers from October 26](https://securteksecurity.com/news/sweden-government-offices-block-chatgpt-claude-work-computers-copilot.md)