RIZAP employee uploaded 726 health records to a personal AI chat
Original title: A RIZAP Employee Uploaded 726 People’s Health Records to a Personal AI Chat
Japanese mutual-aid members' names, birth dates, insurance numbers and disease categories were sent to an unapproved AI account.
On August 20, 2026, a RIZAP employee pulling insurer health-guidance records sent data for 726 members into a generative AI service on a personal account the company had not approved. The Local Government Employees' Mutual Aid Association published its notice on September 4. The records included names, dates of birth, insurance-card symbols and numbers, and disease categories. Both notices agree there was no attacker, stolen credential or exploited vulnerability.
Unconfirmed: Whether the personal AI service retained or reused the uploaded records is not established here.
- The 726 members were spread across fourteen regional branches.
- Disease categories included hypertension, diabetes and dyslipidaemia.
- The upload occurred during routine data-aggregation work.
- Japan's personal-information law treats the disease data as sensitive.
Impact: Health and insurance identifiers exposed to an unapproved AI service
From the original article
3 min read at databreaches.netRowan Sterling reports: On 20 August 2026 an employee of RIZAP Inc. , the Japanese fitness and health-guidance group, was pulling records out of the health-guidance management system it operates for insurers when the data went into a generative AI service on a personal account the company had never approved. The records covered 726 members of...
By Dissent · databreaches.net
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.