--- title: "Prestige Core Solution roadside-service data incident" description: "Prestige Core Solution reported roadside-service data theft affecting up to 5.5 million duplicate-inclusive records." incident_type: "Cybersecurity incident" status: "active" last_modified: "2026-11-09" canonical_url: "https://www.ally.security/incidents/prestige-core-solution-roadside-data-incident-2026" markdown_url: "https://www.ally.security/incidents/prestige-core-solution-roadside-data-incident-2026.md" stix_url: "https://www.ally.security/incidents/prestige-core-solution-roadside-data-incident-2026/stix.json" --- # Prestige Core Solution roadside-service data incident A supplier breach exposed roadside-service records; later notices confirmed three card-number records and Mitsui’s downstream customer scope. Last modified Nov 9, 2026 · 3 sources ## Summary - **Environment:** Roadside-service reception and dispatch systems - **Operational impact:** Affected system stopped; alternative roadside operations continued - **Financial impact:** Financial impact remained under assessment ## What happened [Prestige International](https://www.prestigein.com/) confirmed removal of customer information from systems used by its subsidiary Prestige Core Solution (PCS) for roadside services. [3](#source-3) ## Impact - Up to approximately **5.5 million records**, including duplicates, were involved. Contact details, vehicle identifiers, accident/breakdown records and some bank-account information were affected; the unique-person total remained under review. [3](#source-3) - A [November 6 correction](https://www.prestigein.com/Portals/0/pdf/NEWS/news_20261106_01.pdf) confirmed three card-number records, following an initial statement that no card-data leakage had been confirmed. [2](#source-2) - [Mitsui Sumitomo Insurance](https://www.ms-ins.com/) reported approximately **228,000 records** for some auto-insurance customers within this supplier incident. Its affected fields excluded card and bank-account information. This downstream figure is not added to the supplier total. [1](#source-1) ## Timeline ### October 29, 2026 — Unauthorized access detected Prestige invalidated misused credentials. [3](#source-3) ### October 30, 2026 — Business system stopped Access had continued after the initial response. [3](#source-3) ### November 2, 2026 — Supplier discloses data removal The [first notice](https://www.prestigein.com/Portals/0/pdf/NEWS/news_20261102_01.pdf) sets out the affected record scope. [3](#source-3) ### November 6, 2026 — Card-number exposure confirmed Prestige said it had contacted the card issuers. [2](#source-2) ### November 9, 2026 — Mitsui reports downstream impact The [insurer’s notice](https://www.ms-ins.com/news/fy2026/pdf/1109_1.pdf) identifies its affected customer records. [1](#source-1) ### November 9, 2026 — Briefing updated This briefing was last reviewed and updated on November 9, 2026. ## Threat Group & Attack Vector The response included revoking credentials used without authorization. The method used to acquire them has not been disclosed. [3](#source-3) ### Actors - No threat actor group has been identified in the reviewed public evidence. ### TTPs - [T1078 — Valid Accounts](https://attack.mitre.org/techniques/T1078/): misuse of system credentials. [3](#source-3) ## Response Prestige maintained roadside services through alternative operations while specialists investigated. Regulator reporting and police consultation were underway. [3](#source-3) Mitsui received PCS’s report November 4 and planned individual notifications. [1](#source-1) ## Assets [Download the case-scoped STIX 2.1 bundle]() ## Sources Primary source records used to research this incident. ### Mitsui Sumitomo Insurance notice of information leakage at PCS official · Mitsui Sumitomo Insurance · Nov 9, 2026 ### Prestige group business-system personal-information breach: second notice official · Prestige International · Nov 6, 2026 ### Prestige group business-system personal-information breach: first notice official · Prestige International · Nov 2, 2026
Evidence ledger Review the supporting structured claims. 1. **Affected Organization · 100% confidence · current** Prestige Core Solution roadside-service data breach: Prestige International 2. **Resulted In · 100% confidence · current** Prestige Core Solution roadside-service data breach: The November 2 notice said no card-data leakage had been confirmed at that point. The November 6 follow-up confirmed three card-number records in the removed information and said the card issuers had been contacted. 3. **Resulted In · 100% confidence · current** Prestige Core Solution roadside-service data breach: Prestige detects unauthorized access 4. **Used Attack Technique · 100% confidence · current** Prestige Core Solution roadside-service data breach: https://attack.mitre.org/techniques/T1078/ 5. **Resulted In · 100% confidence · current** Prestige Core Solution roadside-service data breach: Mitsui received PCS’s impact report on November 4 and planned individual notifications. It had not confirmed misuse of its affected customers’ information as of November 9. 6. **Resulted In · 100% confidence · current** Prestige Core Solution roadside-service data breach: Business system stopped after access continued 7. **Resulted In · 100% confidence · current** Prestige Core Solution roadside-service data breach: Prestige continued roadside services through alternative operations while the system was stopped. External specialists were investigating; regulator reporting and police consultation were underway. Financial impact remained under assessment. 8. **Affected Organization · 100% confidence · current** Prestige Core Solution roadside-service data breach: Mitsui Sumitomo Insurance 9. **Occurred At · 100% confidence · current** Business system stopped after access continued: 2026-10-30 10. **Disclosed At · 100% confidence · current** Prestige Core Solution roadside-service data breach: 2026-11-02 11. **Affected Organization · 100% confidence · current** Prestige Core Solution roadside-service data breach: Prestige Core Solution 12. **Occurred At · 100% confidence · current** Supplier discloses data removal: 2026-11-02 13. **Occurred At · 100% confidence · current** Three card-number records confirmed: 2026-11-06 14. **Resulted In · 100% confidence · current** Prestige Core Solution roadside-service data breach: Mitsui Sumitomo Insurance said on November 9 that approximately 228,000 records for some auto-insurance customers had leaked through PCS. Its affected fields included contact, vehicle and accident/breakdown information, excluding card and bank-account information. This is a downstream scope within the supplier incident, not an additional total. 15. **Occurred At · 100% confidence · current** Prestige detects unauthorized access: 2026-10-29 16. **Resulted In · 100% confidence · current** Prestige Core Solution roadside-service data breach: Mitsui details its downstream customer scope 17. **Discovered At · 100% confidence · current** Prestige Core Solution roadside-service data breach: 2026-10-29 18. **Occurred At · 100% confidence · current** Mitsui details its downstream customer scope: 2026-11-09 19. **Resulted In · 100% confidence · current** Prestige Core Solution roadside-service data breach: Prestige International detected unauthorized access to group business systems on October 29 and invalidated misused credentials. Continuing access led it to stop the affected system on October 30. 20. **Resulted In · 100% confidence · current** Prestige Core Solution roadside-service data breach: Affected information included names, addresses, phone numbers, email addresses, vehicle identifiers, accident or breakdown intake details and some bank-account information. 21. **Resulted In · 100% confidence · current** Prestige Core Solution roadside-service data breach: Prestige confirmed removal of personal information held for roadside-service reception and dispatch work performed by Prestige Core Solution. Up to approximately 5.5 million records were involved, including duplicates; a unique-person count remained under review. 22. **Resulted In · 100% confidence · current** Prestige Core Solution roadside-service data breach: Three card-number records confirmed 23. **Resulted In · 100% confidence · current** Prestige Core Solution roadside-service data breach: Supplier discloses data removal