> JapanHacked_
[Resolved][Severity: Moderate][Misdelivery]

CROCO: a mail magazine of its writing service desk was sent with another delivery list set as the body, showing 2,752 subscribers' email addresses to 21,757 recipients

A slip that set another delivery list in the body field put 2,752 subscribers' email addresses into a mail magazine sent to 21,757 recipients.

Disclosed

2021-03-16

Organizations involved

1

Leaked or at risk

2.8K

2,752

Downtime

Unknown

What happened

  1. Around this time, the operations office of the article writing service Shinobi Writing began sending a mail magazine announcing a webinar. In the delivery system, another delivery list had been set by mistake in the place for the email body. [1] [2] [3]

  2. The company emailed recipients to apologize for the leak of email addresses and ask them to delete the mail, and published a notice the same day. [1] [2]

Impact

The body of the mail seen by some recipients showed 2,752 email addresses unrelated to the subject. In total 21,757 copies were sent. Only the email address strings leaked and no other data was included. [1] [2] [3]

The company will review its delivery procedure and fix the system, combining delivery work by several people with an automatic check of the content by the system. [1] [2]

Timeline

  1. Started 2021-03-15
  2. Detected, Disclosed 2021-03-16
  3. 1 days

Attack or cause

Method
[Misdelivery]
Impact
[Data leak]
Entry point
E-mail

Data exposed or at risk

[E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][Official]誤表記によるメールアドレスの流出についてCROCO · 2021-03-16
  2. [2][News]メールマガジン本文に登録者2,752人のメールアドレスを記載し誤送信ScanNetSecurity · 2021-03-23 08:00
  3. [3][News]編集プロのメルマガに登録者メアド - 操作ミスでSecurity NEXT · 2021-03-24