> JapanHacked_
[Resolved][Severity: Moderate][Misdelivery]

Corporate Environmental Risk Solution Institution: a newsletter was sent with a spreadsheet holding personal data of 1,976 customers attached by mistake

A file with personal data of 1,976 customers was attached to a newsletter by mistake and sent as is.

Disclosed

2021-06-11

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It sent a newsletter to 1,976 customers who had applied for exams, seminars or teaching materials it had run. A spreadsheet with personal data was attached because a button for choosing the recipients was mistaken. [1] [2]

  2. It announced the case. [1] [2]

Impact

The attached file held personal data of the 1,976 customers who received the newsletter. About 50 minutes later it sent an email to point out the mistake and apologize. [1] [2]

Timeline

  1. Detected 2021-06-10
  2. Disclosed 2021-06-11
  3. 1 days

Attack or cause

Method
[Misdelivery]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name]

Organizations involved

Open in organization search

Sources

  1. [1][News]検定合否情報など含むファイルをメールに誤添付 - 企業環境リスク解決機構Security NEXT · 2021-06-14
  2. [2][News]メルマガに個人情報記載Excelファイル誤添付、配信先選択ボタン誤認が原因ScanNetSecurity · 2021-06-16 08:00