> JapanHacked_
[Resolved][Severity: Moderate][Misdelivery]

Kyushu Electric Power: network fee bills went to the wrong electricity retailer, leaking data of 3,522 customers

A full set of January network fee bills for one electricity retailer was sent to another retailer because of a wrong recipient setting.

Disclosed

2020-02-05

Organizations involved

1

Leaked or at risk

3.5K

3,522

Downtime

Unknown

What happened

  1. The January bills for retailer A were sent to retailer B by mistake. [1]

  2. Retailer B reported the error, and the data was deleted at the company's request. [1]

  3. Public disclosure. [1]

  4. The company also disclosed that, while fixing a fault in the fee calculation system, a manual entry error had sent data on about 400 other customers to their former retailers. [3]

Impact

The bills listed names, addresses, supply point numbers, contracted power and January usage for 3,522 customers, 3,218 of them individuals. [1] [2]

Timeline

  1. Disclosed 2020-02-05
  2. 1 days

Attack or cause

Method
[Misdelivery]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Postal address]

Organizations involved

Open in organization search

Sources

  1. [1][Official]小売電気事業者さまへの託送料金請求書を誤って通知する事案が発生しました －通知誤りによりお客さまの個人情報が漏えい－Kyushu Electric Power · 2020-02-05
  2. [2][News]小売電気事業者の顧客情報を誤って別事業者へ通知 - 九電Security NEXT · 2020-02-06
  3. [3][News]個人情報を別業者へ誤通知、システム障害影響で - 九電Security NEXT · 2020-05-08