JICA: a misconfigured cloud system behind its international career site PARTNER let outsiders view names and birth dates in 8,418 records

1. 2020-12-24

   A third party accessed personal data through the misconfigured system. [1] [3]

2. 2021-01-07

   After similar cases involving external cloud systems occurred in Japan, JICA checked and found the access-permission misconfiguration. It changed the settings at once. [1] [3]

3. 2021-02-09

   JICA applied an update and finished the fundamental fix. [1]

4. 2021-03-16

   JICA announced the case. [1] [2] [4]

8,418 records were accessed on December 24, 2020. They include names, birth dates, addresses, phone numbers, email addresses, affiliations, registration purposes, preferred work locations and work experience. [1] [3]

JICA notified the individuals and registered organizations by email. No unauthorized access has been found since the fix. [1]