Panasonic HD Sent Employee Information to Banned Generative AI, 330,000 People Affected

What happened

Panasonic Holdings (HD) announced on the 23rd that personal information of about 330,000 people from its group was uploaded to an outside generative AI service. The service is banned inside the company. A team working on a new HR (human resources) system for a subsidiary uploaded the data in late September. The company says a specific employee broke internal rules. It was not a cyberattack. The uploaded data included addresses, phone numbers, email addresses and employee numbers.

Key numbers

• About 75,000 current employees
• About 55,000 family members listed as emergency contacts for employees
• About 178,000 former employees who left the company since 1978
• About 26,000 family members of employees who left since 2016
• Total: about 330,000 people

Some background

Generative AI is software that creates text or images from a prompt. Many companies ban staff from using outside AI tools because data typed into them can leave the company's control. In this case, the employee deleted chat history and data on their PC after the problem was found.

Why it matters

This case shows how one employee's mistake can expose the data of hundreds of thousands of people. Panasonic says the leaked data has not been made public or misused, and that the AI service had its data-learning feature turned off. Still, the affected people have had their personal details sent outside the company.

What to watch

• Whether any of the leaked data is found online or misused
• How the Personal Information Protection Commission responds to the report made on September 29
• Panasonic's plan to delete the leaked data completely after October 25
• Whether companies tighten rules on outside AI tools