[Resolved][Severity: Critical][Misdelivery]

The Kanagawa Bank: it unknowingly emailed a spreadsheet containing 11,941 customer records to 30 business partners 39 times

Some sheets in a business document sent to partners held 11,941 customer records. It was sent 39 times between May 2018 and April 2021.

Disclosed

2021-05-11

Organizations involved

Leaked or at risk

11.9K

11,941

Downtime

Unknown

What happened

2018-05-18
From this day until April 26, 2021, it emailed the spreadsheet used as business material to 30 business partners 39 times with customer data still in it. [1]
2021-04-28
A business partner contacted the bank and the problem came to light. [1]
2021-05-07
It confirmed that the emails it had sent were deleted. [1]

Impact

Some sheets held the customer names, addresses, customer numbers, industries, sales, loan balances and loan amounts of 11,941 customers as of September 30, 2016. The file was password protected, but how the password was shared varied by case, and sometimes it was sent through the same email route, so-called PPAP. The partners are bound by confidentiality agreements, and no secondary leak beyond the recipients was confirmed. [1]

The bank said it would explain what happened to the customers concerned, apologize, and consider measures against recurrence. [1]