Panasonic: a member of an HR system project uploaded data on about 334,000 current and former employees and family members to an external generative AI service the company had banned. Training was off, the provider kept deleted data for 30 days.
In our view, a written ban isn't a control, and even approved AI leaves hard calls to staff, especially for client data that isn't personal data. Time to rethink DLP across every channel.
https://japancyberwatch.com/articles/panasonic-generative-ai-employee-data-upload-2026