Saitama Prefecture: the names of 191 COVID-19 patients were posted on the prefecture's website by mistake for about five hours
While fixing duplicated data in a press release, staff posted a list containing patient names on the site by mistake. A caller pointed it out and the file was replaced.
Disclosed
2021-01-27
Organizations involved
1
Leaked or at risk
191
191
Downtime
Unknown
What happened
From around this time, the names of 191 COVID-19 patients were visible on the website. [1]
By around this time the file in question had been deleted and replaced with the right one. [1]
The prefecture found duplicated information in a press release document and fixed the data on its site, but posted by mistake a list that contained patient names. A phone call from outside revealed it. The prefecture is explaining and apologizing to those concerned. [1]
Timeline
- Started 2021-01-25
- Disclosed 2021-01-27
- 2 days
Attack or cause
- Method
- [Misconfiguration]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Major]SaitamaPrefecture191 leaked
Saitama Prefecture
Sources
- [1][News]新型コロナウイルス患者の氏名をサイトに誤掲載 - 埼玉県Security NEXT · 2021-01-27