MetLife Japan probes suspected unauthorized data transfer affecting thousands of records

MetLife Insurance K.K., the Japanese unit of U.S.-based life insurer MetLife Inc., is investigating a suspected unauthorized data transfer involving an employee, with several thousand records potentially affected in what could rank among the largest incidents of its kind in Japan’s life insurance sector.

The employee, who had been temporarily assigned to another organization, is believed to have accessed and removed company-related information without authorization. The incident came to light Tuesday, prompting an internal investigation into the scope and nature of the data transfer.

Preliminary estimates indicate that the breach may involve several thousand sets of information. The company is examining whether the actions were carried out independently or as part of a broader scheme, as well as whether any personal or sensitive customer data was included in the transferred information.

MetLife Insurance K.K. has initiated a formal probe and plans to disclose detailed findings once the investigation is complete. The inquiry is expected to focus on the circumstances surrounding the employee’s access to the data and the controls in place during the temporary assignment.

The case highlights a growing pattern of similar incidents within Japan’s insurance industry, particularly involving employees seconded to partner organizations such as banks and sales agencies. Major insurers have identified comparable data-handling issues in recent months.

Nippon Life Insurance Co., one of Japan’s largest life insurers, identified more than 1,500 such cases last year. Dai-ichi Life Holdings Inc., a major insurance holding company, disclosed over 1,100 similar incidents earlier this year. Smaller and midsize insurers have also reported comparable cases, underscoring broader concerns about data governance and oversight across the sector.