> JapanHacked_
[Resolved][Severity: Moderate][Misdelivery]

NTT DATA Mathematical Systems: a list of 10,000 customers was attached by mistake to an event email, sending names and email addresses to 2,000 recipients

An event email carried the recipient list by mistake, and the names, emails and company names of 10,000 people reached 2,000 recipients.

Disclosed

2021-02-26

Organizations involved

1

Leaked or at risk

10K

10,000

Downtime

Unknown

What happened

  1. The company announced the case. [2]

  2. Around this time, while sending an email about an event it hosted, the company attached the CSV file of the recipient list by mistake. It was sending in batches of 1,000 and stopped after 2,000 when it noticed. [1] [2]

Impact

The list covered 10,000 customers who had exchanged business cards with staff or registered their contacts at events and on the website: company names (corporate names only), names and email addresses. About 2,000 recipients were able to see the details of other customers. [1] [2]

The company contacted and apologized to the customers concerned and asked those who received the list to delete the file. It is considering measures to prevent a recurrence. [1] [2]

Timeline

  1. Started, Detected, Disclosed 2021-02-26
  2. 1 days

Attack or cause

Method
[Misdelivery]
Impact
[Data leak]
Entry point
E-mail

Data exposed or at risk

[Name][E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][News]送信先顧客リストをメールに誤添付 - NTTデータ数理システムSecurity NEXT · 2021-03-01
  2. [2][News]メール配信作業中のミスが原因で誤送信、1万名分の顧客リストが流出ScanNetSecurity · 2021-03-04 08:00