CROCO: a mail magazine of its writing service desk was sent with another delivery list set as the body, showing 2,752 subscribers' email addresses to 21,757 recipients
A slip that set another delivery list in the body field put 2,752 subscribers' email addresses into a mail magazine sent to 21,757 recipients.
Disclosed
2021-03-16
Organizations involved
1
Leaked or at risk
2.8K
2,752
Downtime
Unknown
What happened
Around this time, the operations office of the article writing service Shinobi Writing began sending a mail magazine announcing a webinar. In the delivery system, another delivery list had been set by mistake in the place for the email body. [1] [2] [3]
The company emailed recipients to apologize for the leak of email addresses and ask them to delete the mail, and published a notice the same day. [1] [2]
Impact
The body of the mail seen by some recipients showed 2,752 email addresses unrelated to the subject. In total 21,757 copies were sent. Only the email address strings leaked and no other data was included. [1] [2] [3]
The company will review its delivery procedure and fix the system, combining delivery work by several people with an automatic check of the content by the system. [1] [2]
Timeline
- Started 2021-03-15
- Detected, Disclosed 2021-03-16
- 1 days
Attack or cause
- Method
- [Misdelivery]
- Impact
- [Data leak]
- Entry point
Data exposed or at risk
Organizations involved
[Breached][Moderate]Tokyo, ShibuyaInformation and communications2,752 leaked
CROCO Inc.
Sources
- [1][Official]誤表記によるメールアドレスの流出についてCROCO · 2021-03-16
- [2][News]メールマガジン本文に登録者2,752人のメールアドレスを記載し誤送信ScanNetSecurity · 2021-03-23 08:00
- [3][News]編集プロのメルマガに登録者メアド - 操作ミスでSecurity NEXT · 2021-03-24