Securitize Japan Cyberattack Exposed Names of 617 Sony Bank Customers
Key Takeaways
- โขSecuritize Japan, the Tokyo-based unit of US tokenization firm Securitize, disclosed a cyberattack that exposed customer data held by Sony Bank, NTT Data and Marui Group.
- โขThe confirmed disclosures show that the names of 617 Sony Bank customers were exposed in the incident.
- โขSony Bank, NTT Data and Marui Group have all acknowledged the breach, and their investigations remain open.
- โขThe incident spans Japan's banking, IT services and consumer finance sectors, as well as the US tokenization industry, where Securitize serves as the tokenization partner and transfer agent for BlackRock's BUIDL fund.
- โขUnder Japan's Act on the Protection of Personal Information, significant data leaks generally require reporting to the Personal Information Protection Commission and notification of affected individuals, with any filings dependent on the ongoing investigations' findings.

Securitize Japan, the Tokyo-based unit of United States tokenization firm Securitize, has disclosed a cyberattack that exposed customer data held by Sony Bank, NTT Data and Marui Group. All three companies have acknowledged the breach, and their investigations remain open.
According to the confirmed disclosures, the incident exposed the names of 617 Sony Bank customers. The case spans Japan's banking, IT services and consumer finance sectors as well as the United States tokenization industry, given the companies involved.
Background: The Companies Involved
Securitize is a United States-based financial technology firm specializing in the tokenization of real-world assets. It provides infrastructure for issuing, managing and servicing tokenized securities, and gained wide attention as the tokenization partner and transfer agent for BlackRock's tokenized fund, BUIDL. Securitize Japan is the firm's Tokyo subsidiary, operating in the Japanese market.
Sony Bank is the banking arm of Sony Group Corporation, providing online banking services to retail customers in Japan. NTT Data is the information technology services company of Japan's NTT Group and one of the country's largest IT service providers. Marui Group is a Japanese retail and consumer finance company with department store and credit card operations.
Regulatory Context
Under Japan's Act on the Protection of Personal Information (APPI), businesses that handle personal data are generally required to report significant data leaks to the country's Personal Information Protection Commission and to notify affected individuals. How these requirements apply to the Securitize Japan incident would depend on the findings of the ongoing investigations. Any commission filings or notifications to affected customers, where required, would therefore be key follow-up details as the process moves forward.
What Remains Unconfirmed
The affected companies have acknowledged the breach but have not published a complete account of how the attack occurred, when it began, or the full scope of data exposed beyond the confirmed figure of 617 Sony Bank customer names. Investigations by Sony Bank, NTT Data and Marui Group remain open. Until those investigations produce published findings, updated figures or details will rest on follow-up disclosures from the companies themselves.
This content was first published on COINOTAG: https://en.coinotag.com/securitize-japan-breach-sony-bank-customer-data