Chubu Electric reports possible data breach affecting about 74,000 people
Chubu Electric Power reports unauthorized access may have exposed personal data of about 74,000 people, discovered July 29, 2026; no misuse or power-supply impact confirmed.
Chubu Electric Power said on August 4, 2026, that an external unauthorized access incident may have resulted in the exposure of personal information belonging to roughly 74,000 individuals, including business partners and employees. The company said the incident was first flagged by a third-party organization on July 29, 2026, and that no confirmed cases of misuse or operational impact to systems or electricity supply have been detected.
Chubu Electric confirms potential exposure of 74,000 records
Chubu Electric Power disclosed that the possible leak involves approximately 74,000 people connected to the utility, encompassing both company staff and external contractors. The statement released on August 4, 2026, did not identify specific affected partner firms but emphasized the scale of records under review.
Company officials stressed that, as of the announcement, there was no evidence the exposed data had been used maliciously. They also said routine checks found no disruption to customer systems or to electricity generation and distribution services.
How the breach was discovered and the extent of access
The company said it learned of the incident after receiving information from a third-party security organization on July 29, 2026. That notification prompted Chubu Electric to begin an internal investigation and to undertake targeted system checks to assess whether additional systems had been compromised.
Chubu Electric reported that roughly 2,400 items of employee email and contact information may have been viewed without authorization. The utility did not indicate that internal operational controls were bypassed, but acknowledged uncertainty about how far the unauthorized viewer penetrated non-operational systems.
Types of information that may have been exposed
According to the company, the potentially accessed data include job titles, full names, email addresses and telephone numbers of employees and trading partners. Chubu Electric emphasized that the information appears limited to contact and role identifiers rather than sensitive financial or technical records.
Officials said they are still verifying whether any other categories of personal data were accessible. The utility’s initial assessment focuses on directory-style information used for business communications, and it has prioritized confirming the boundaries of the exposure.
Operational checks show no system or supply disruptions
Chubu Electric has assured customers and the public that the incident has not affected power supply or caused system failures linked to grid operations. The company said engineers and IT teams conducted checks on core operational systems and found no signs of tampering or service interruption.
The company clarified that the suspected access related to non-operational administrative systems rather than control or distribution infrastructure. Chubu Electric said this separation helped prevent any immediate risk to electricity delivery during the ongoing probe.
Advice to employees, partners and the public; company response steps
Chubu Electric is urging employees, suppliers and other stakeholders to remain alert for suspicious emails, calls or messages that may impersonate company staff. The utility specifically warned about communications that attempt to solicit credentials or personal information and advised verifying requests through known internal channels.
The company said it has launched an internal review and is cooperating with the external security firm that first reported the issue. Chubu Electric indicated it will notify individuals determined to be affected and is preparing guidance on protective measures, such as monitoring for phishing attempts and checking account and contact security settings.
Independent cybersecurity specialists note that directory-type exposures can be used as a foothold for targeted phishing and social-engineering campaigns. Companies in similar situations typically advise heightened vigilance, multi-factor authentication, and prompt reporting of any suspicious contact.
Chubu Electric also said it will continue system monitoring and take steps to strengthen defenses around administrative systems. The utility has not publicly detailed specific technical fixes but said it is reviewing access logs and enhancing detection mechanisms as part of its response.
The company’s announcement closed by reiterating that, at present, no misuse of the possibly exposed information has been confirmed and that investigations are ongoing. Stakeholders with concerns were asked to contact Chubu Electric’s designated support channels for information and assistance.
