JP — ITmedia
Panasonic HD Subsidiary Uploaded Personal Data of About 334,000 People to Generative AI Service Banned Internally
Security2 min read
Panasonic Operational Excellence, a subsidiary of Panasonic Holdings, said an employee uploaded personal data of about 334,000 people to a generative AI service that the company bans for internal use. The data came from a personnel system project.
What happened
On October 23, 2026, Panasonic Operational Excellence said an employee working on an internal project uploaded data to an outside generative AI service. The company does not allow staff to use that service. The data included personal information of current and former Panasonic Group employees and their families. The problem came up in a project to introduce a personnel information system run with its subsidiary Panasonic Digital. The company says this was caused by a breach of internal rules by one employee, not by an outside attack.
Key numbers and facts
- About 334,000 people were affected in total.
- About 75,000 current employees and about 178,000 former employees in Japan.
- About 81,000 family members, whose emergency contact details were included.
- The data was from the system's records as of April 2026.
- The company reported the incident to Japan's Personal Information Protection Commission on September 29.
Some context
Generative AI is software that creates text or images from user prompts. Many companies limit its use because data sent to outside services can leave their control. In this case, the company says the employee deleted chat history and local copies right after the problem was found. The AI service operator also said that AI training was turned off when the data was uploaded, so the data was not used to answer other users. However, the operator keeps deleted data for 30 days for security and legal reasons, so the data will be kept until October 25.
Why it matters
Personal data of this size is a serious privacy risk, even when no leak to the public has been found. Employees and their families may need to watch for scams or misuse. The case also shows that strict rules on AI tools are not enough without good controls and training. The company says it will review how personal data is handled, manage how staff use generative AI services, and train employees more.
What to watch
- Whether any of the data is found online or misused.
- What rules and controls Panasonic adds for generative AI tools.
- Any action or guidance from the Personal Information Protection Commission.
- Whether the company's review leads to more staff training.
Glossary
- Panasonic Operational Excellence
- A Panasonic Holdings subsidiary based in Kadoma, Osaka, that works on company operations and internal projects.
- Panasonic Digital
- A Panasonic subsidiary that was building the personnel information system with Panasonic Operational Excellence.
- Generative AI
- AI software that makes new text, images, or other content in response to user prompts.
- Personal Information Protection Commission
- Japan's government body that oversees how companies protect personal data.
- AI training
- The process of using data to teach an AI model, so it can learn to give better answers.