> JapanHacked_
[Resolved][Severity: Moderate][Misdelivery]

BOOKOFF: an email to BOOKOFF Online members carried a file listing 1,309 members' email addresses

An email to users of the BOOKOFF Online home pickup buying service had a file attached by mistake that listed the email addresses of 1,309 members.

Disclosed

2020-03-04

Organizations involved

1

Leaked or at risk

1.3K

1,309

Downtime

Unknown

What happened

  1. A customer center employee sent an email to users of the Takuhonbin home pickup buying service with a file of email addresses attached by mistake. [1]

  2. A customer who received it pointed out the error. [1]

  3. The company apologized to the 1,309 people and asked them to delete the email and the file. [1]

  4. Public disclosure. [1]

Impact

{n:1309} email addresses of members who received the company's notices became visible to other recipients. [1]

Timeline

  1. Started, Detected 2020-03-03
  2. Disclosed 2020-03-04
  3. 1 days

Attack or cause

Method
[Misdelivery]
Impact
[Data leak]
Entry point
E-mail

Data exposed or at risk

[E-mail address]

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][News]メール“誤添付”案件 ~ 宅配買取サービス利用者へ連絡の際、個人情報1,300件記載ファイルを添付(ブックオフグループホールディングス)ScanNetSecurity · 2020-03-05 08:00