> JapanHacked_
[Resolved][Severity: Critical][Misdelivery]

Kanagawa Shinkin Bank: 1,094 tuition auto-transfer records were sent through a cloud service to 79 unrelated schools, including names of 599 children and staff and 495 account records

It sent 1,094 tuition transfer records to 79 unrelated schools, including 599 names and 495 account records.

Disclosed

2021-06-28

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. The problem came to light. [1]

  2. The data at the wrong recipients was deleted. [1]

  3. Security NEXT reported the case. [1]

Impact

When handing over the tuition auto-transfer data of two schools through a cloud service, it sent 1,094 records to 79 schools that were not the intended recipients, including kindergartens, nurseries, elementary, junior high and high schools. They include the names of 599 children and staff subject to the transfers and 495 account records with account holders, branch names and account numbers. [1]

Timeline

  1. Detected 2021-05-20
  2. Disclosed 2021-06-28
  3. 39 days

Attack or cause

Method
[Misdelivery]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Bank account]

Organizations involved

Open in organization search

Sources

  1. [1][News]学費振替情報を無関係79校に誤送信 - かながわ信金Security NEXT · 2021-06-28