TEPCO Holdings: a contractor sent radiation dose data of 6,053 Fukushima Daiichi workers to the wrong companies
Preparing the monthly dose checks at Fukushima Daiichi, a contractor emailed company contacts files that included other companies' workers.
Disclosed
2020-04-13
Organizations involved
1
Leaked or at risk
6.1K
6,053
Downtime
Unknown
What happened
On the afternoon of , while the partner company was emailing each firm's dose officer, one recipient said the mail contained other firms' data. A check showed that 39 of 79 companies had received other firms' dose data. [1]
Impact
6,053 records with workers' personal ID numbers, names, employers and radiation doses measured by electronic dosimeters went to other companies. [1]
Response
The same day the 39 companies were contacted; they deleted the mails and confirmed no one else had seen them. The company said files will no longer be emailed; each firm will view its data in a system. [1]
Timeline
- Detected 2020-04-07
- Disclosed 2020-04-13
- 6 days
Attack or cause
- Method
- [Misdelivery]
- Impact
- [Data leak]
- Entry point
- Supplier
Data exposed or at risk
Supply chain
- Organizations listed on this site
- 1
Organizations involved
[Through a supplier][Moderate]Tokyo, ChiyodaElectricity, gas, heat and water6,053 leaked
Tokyo Electric Power Company Holdings, Inc.The partner company it hired to send the dose data sorted the files wrongly and did not check them before sending.
Sources
- [1][News]福島第一原子力発電所で他企業の個人情報を誤送信、6,053件の個人情報が流出（東京電力ホールディングス）ScanNetSecurity · 2020-04-15 08:00