Next Mobility: a service email sent with addresses in CC exposed 1,350 customers' email addresses
The joint venture of Nishitetsu and Mitsubishi Corporation sent a service notice in three batches of 450 with the addresses in CC, so each group could see the others.
Disclosed
2020-06-10
Organizations involved
1
Leaked or at risk
1.4K
1,350
Downtime
Unknown
What happened
A service notice sent just after midnight went to 1,350 addresses in three batches of 450, with the addresses mistakenly in CC. A recipient pointed it out, and the same day the company apologized to the customers and asked them to delete the mail. [1]
Impact
Within each batch, recipients could see one another's addresses, 1,350 addresses in all. [1]
Timeline
- Disclosed 2020-06-10
- 1 days
Attack or cause
- Method
- [Misdelivery]
- Impact
- [Data leak]
- Entry point
Data exposed or at risk
Organizations involved
[Breached][Moderate]Fukuoka, Fukuoka, ChuoTransport and postal services1,350 leaked
Next Mobility Co., Ltd.
Sources
- [1][News]顧客向けメールで「CC」利用するミス - ネクスト・モビリティSecurity NEXT · 2020-06-10