[Resolved][Severity: Moderate][Misdelivery]

LINE: double-stuck address labels on membership gifts for Disney x LINE exposed the names and addresses of 2,608 customers to other customers

When its contractor changed carriers, it stuck another customer's address label over the original one without removing it. Parcels sent on November 30 were affected.

Disclosed

2020-12-03

Organizations involved

Leaked or at risk

2.6K

2,608

Downtime

Unknown

What happened

2020-11-30
The company shipped membership gifts to customers on the 12-month plan of Disney x LINE. [1] [2]
2020-12-01 16:28
A recipient contacted the company, which led it to notice the problem. [2]
2020-12-02 14:02
The company confirmed the facts with its delivery contractor. [2]
2020-12-03
The company disclosed the case. [1] [2]

Impact and cause

In 2,608 parcels, another customer's address label sat under the one on the packaging, so that customer's name and address could be seen. The cause was that when the delivery contractor changed carriers, labels had to be replaced, but it stuck another customer's label over the original waybill instead of removing it. [1] [2]

The company explained and apologized to affected customers and is preparing to take back the label area to protect their data. Until then it asked customers to keep the label in place. [1] [2]