Minamiboso City Tourism Association: prize emails for a Minamiboso city coupon draw carried a list of 1,577 entrants
In a coupon program run for Minamiboso city, the city's tourism association emailed 60 winners with a list of the personal data of 1,577 entrants attached by mistake.
Disclosed
2020-03-12
Organizations involved
2
Leaked or at risk
1.6K
1,577
Downtime
Unknown
What happened
The association held a prize draw for users of the city-only coupons. [1]
Emails to 60 of the winners went out with an Excel file listing the entrants attached. [1]
A recipient told the city's tourism promotion section, which brought the error to light. [1]
The association emailed an apology to the entrants on the list. [1]
All 60 recipients confirmed that they had deleted the file. [1]
Impact
The names, email addresses, phone numbers, addresses and postal codes of {n:1577} entrants were sent to 60 winners. [1]
Response
The city told the association to have more than one person check the contents before sending to many recipients at once. [1]
Timeline
- Started, Detected 2020-03-09
- Disclosed 2020-03-12
- 3 days
Attack or cause
- Method
- [Misdelivery]
- Impact
- [Data leak]
- Entry point
Data exposed or at risk
Supply chain
- Organizations listed on this site
- 2
Organizations involved
[Through a supplier][Moderate]Chiba, MinamibosoMunicipality1,577 leaked
Minamiboso CityIt had hired the association to run a coupon program for recovery from disaster.
[Breached][Moderate]Chiba, MinamibosoOther services1,577 leaked
Minamiboso City Tourism Association
Sources
- [1][News]個人情報ファイルを誤添付しメール送信、全送信者の削除同意を確認(南房総市)ScanNetSecurity · 2020-03-17 08:00