> JapanHacked_
[Resolved][Severity: Moderate][Misdelivery]

Japan Fair Trade Commission: a survey summary was emailed to two organizations and one business with the source spreadsheet still embedded in its charts, exposing data on 1,381 people

Clicking a chart in the file revealed the source spreadsheet with names, contacts and answers of 1,381 contacts at 1,248 organizations.

Disclosed

2021-02-26

Organizations involved

1

Leaked or at risk

1.4K

1,381

Downtime

Unknown

What happened

  1. The commission emailed an outside organization a summary of its survey on antitrust compliance in cooperatives (published in June 2020). It sent the same file to other recipients on August 28 and September 7, in total two organizations and one business. [1] [2]

  2. The general affairs division checked the file and found that it contained personal data collected in the survey. [1]

  3. The commission asked the recipients by phone to delete the file. [1]

  4. The commission announced the case. [1]

  5. It repeated the request to the recipients and reported to and apologized to respondents by post and email. [1]

Impact

The charts in the file had the source spreadsheet embedded. It could not be seen by merely opening the file, but clicking a chart showed titles, names, phone numbers, email addresses and survey answers of 1,381 contacts at 1,248 cooperatives and other organizations. [1] [2]

The commission will take measures to prevent a recurrence and strengthen training and its management system. [1]

Timeline

  1. Started 2020-08-14
  2. Detected 2021-02-24
  3. Disclosed 2021-02-26
  4. 196 days

Attack or cause

Method
[Misdelivery]
Impact
[Data leak]
Entry point
E-mail

Data exposed or at risk

[Name][Phone number][E-mail address][Employment]

Organizations involved

Open in organization search

Sources

  1. [1][News]公正取引委員会で情報流出、ファイルのグラフをクリックすると個人情報が閲覧可能にScanNetSecurity · 2021-03-05 08:00
  2. [2][News]アンケート調査回答の集計前データを誤って外部提供 - 公取委Security NEXT · 2021-03-31