Suntory Holdings says cloud breach leaked data of about 100,000 people

Suntory Holdings Ltd. reported on Nov. 2, 2026, that unauthorized access to Microsoft’s cloud service leaked personal data of roughly 100,000 individuals, including employees and applicants.

Suntory Holdings detected unauthorized activity in Microsoft’s cloud service on Oct. 28, 2026, and blocked the access the same day. The company confirmed on Oct. 29 that some downloaded files contained personal information. The confirmation followed the initial detection of unauthorized access.

Suntory Holdings has confirmed no misuse or fraudulent activity involving the leaked data as of Nov. 2, 2026. The company has not detected any malicious use of the compromised information.

The leaked data includes names and e-mail addresses of about 90,000 employees across Suntory Holdings group companies and affiliated firms. The data pertains to internal employees and associated business partners.

Email addresses of around 7,300 individuals registered for Suntory Holdings’ corporate activities experience program were also compromised as of the end of 2023. The data reflects registrations from the previous year.

The breach leaked names of approximately 7,200 applicants for Suntory Holdings’ 2026 new graduate recruitment process. The breach exposed applicant data for the current hiring cycle. No credit card numbers were compromised, and sensitive financial data was not part of the breach.

Suntory Holdings filed a preliminary notice of the breach with Japan’s Personal Information Protection Commission on Nov. 2, 2026. The notice was submitted shortly after the breach was confirmed.

Japan’s Act on the Protection of Personal Information requires companies to submit preliminary notices to the Personal Information Protection Commission upon discovering a breach. Suntory Holdings complied with this law.

The breach affects Suntory Holdings’ group-wide information management systems, raising scrutiny over security practices in the food and beverage industry. The incident may prompt industry-wide security reviews. Suntory Holdings operates businesses across beverages, alcoholic drinks, restaurant operations, and home delivery. The incident may involve employee rosters, hiring data, and customer location information.

The breach involved personal data stored in an external cloud environment. It occurred through unauthorized access to an external cloud service involving risks associated with third-party cloud supply chains for consumer-goods companies.

Paycloud Holdings Inc. reported that approximately 77 million email addresses were leaked due to unauthorized access to its subsidiary Arara Inc.’s email distribution service. The breach involved a separate entity but highlights broader risks in email services. Arara Inc.’s messaging service was misused to send approximately 7.13 million fraudulent emails impersonating credit card companies. Arara Inc. suspended its messaging service on Oct. 26, 2026, pending a security review before deciding whether to resume operations, a suspension that followed the unauthorized access incident.

Suntory Holdings plans to strengthen security measures to prevent future breaches and has committed to further investigations. The company aims to enhance its data protection protocols.

Suntory Holdings is contacting affected individuals directly and has set up a toll-free inquiry line, 0120-050-310, for questions. The line operates from 9:30 AM to 5 PM, excluding weekends, holidays, and year-end and New Year periods. It will remain open on Nov. 3, 2026, despite it being a public holiday.