> JapanHacked_
[Resolved][Severity: Moderate][Misdelivery]

Minamiboso City Tourism Association: prize emails for a Minamiboso city coupon draw carried a list of 1,577 entrants

In a coupon program run for Minamiboso city, the city's tourism association emailed 60 winners with a list of the personal data of 1,577 entrants attached by mistake.

Disclosed

2020-03-12

Organizations involved

2

Leaked or at risk

1.6K

1,577

Downtime

Unknown

What happened

  1. The association held a prize draw for users of the city-only coupons. [1]

  2. Emails to 60 of the winners went out with an Excel file listing the entrants attached. [1]

  3. A recipient told the city's tourism promotion section, which brought the error to light. [1]

  4. The association emailed an apology to the entrants on the list. [1]

  5. All 60 recipients confirmed that they had deleted the file. [1]

Impact

The names, email addresses, phone numbers, addresses and postal codes of {n:1577} entrants were sent to 60 winners. [1]

Response

The city told the association to have more than one person check the contents before sending to many recipients at once. [1]

Timeline

  1. Started, Detected 2020-03-09
  2. Disclosed 2020-03-12
  3. 3 days

Attack or cause

Method
[Misdelivery]
Impact
[Data leak]
Entry point
E-mail

Data exposed or at risk

[Name][E-mail address][Phone number][Postal address]

Supply chain

Organizations involved

Open in organization search

Sources

  1. [1][News]個人情報ファイルを誤添付しメール送信、全送信者の削除同意を確認(南房総市)ScanNetSecurity · 2020-03-17 08:00