Incident·WS-0139·Oct 23, 2026·in the wild·Privacy & data leaks

Panasonic staff upload HR data on 334,000 people to a banned generative-AI service

Panasonic Holdings; Panasonic Operational Excellence; Panasonic Digital (subsidiary); an unnamed external generative-AI service

28/100
WS-2 Moderate
Harm score 45, signal score 8. Autonomy: tool (a person misused it). How the scores work.
Harm 2/5
damage actually done
Reach 3/5
who was affected
Autonomy 0/4
how much the AI did on its own
Novelty 1/5
how new the behavior was
Permanence 2/5
how hard it is to undo

Panasonic Holdings said on Oct 23 that personal data on about 334,000 people had left the company after a member of a human-resources system project uploaded part of the HR database to an external generative-AI service the company prohibits. Per Kansai TV, the data covers about 75,000 current employees and about 178,000 former employees who left between 1978 and 2026 (employee number, address, phone and email), plus about 55,000 family members of current employees and about 26,000 of former employees listed as emergency contacts (name, address, phone and email). The company says the provider confirmed that its training feature was disabled for the uploaded data, that it has found no misuse so far, and that it will review its rules for handling personal data and for managing generative-AI services and set up an inquiry desk.

Damage

Personal data on about 334,000 current and former employees and family members sent to an unauthorized AI provider; no misuse confirmed

Sources

Kansai TV, second source. Evidence confidence: medium. Dated by disclosure; the upload date is not given. Panasonic's own notice (holdings.panasonic, Oct 23) could not be opened by this run; the figures are Kansai TV's (Oct 23, 22:20 JST). The AI service is not named. A secondary summary says the case was reported to Japan's Personal Information Protection Commission on Sept 29 and that the provider's 30-day retention of deleted data ends Oct 25; not verified against the notice. Same pattern as Samsung's 2023 ChatGPT code leaks, at far larger scale.

Factor ratings and the score are this index’s judgments by a published formula; facts, dates and figures come from the linked sources. Where a lawsuit is pending, the summary reports allegations, not findings.