> JapanHacked_
[Resolved][Severity: Major][Misdelivery]

Hokkaido Federation of National Health Insurance Associations: data on 8,903 elderly insured people of Noboribetsu City, including health check results, was mistakenly sent to Saroma and Toyokoro towns

Data on 8,903 people of Noboribetsu, with names and 238 items including FY2020 health checks, went to two other towns through a wrong save location. Both deleted it.

Disclosed

2021-08-12

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. While analyzing data to support Noboribetsu City's prevention and health program, it specified the wrong save location and skipped checking, and sent Noboribetsu's data to the Saroma and Toyokoro town offices over its dedicated line system. [1]

  2. Saroma contacted it and the error came to light. It asked Saroma to delete the data and apologized, and also explained to and apologized to Toyokoro and asked for deletion. [1]

  3. It visited Noboribetsu City and apologized in person. [1]

  4. It announced the case. [1]

Information sent

Basic information such as names of 8,903 insured people under Noboribetsu's late-stage elderly medical care, and 238 items of medical, health check and care information including FY2020 results. Deletion at both town offices was confirmed. [1]

Timeline

  1. Started 2021-07-19
  2. Detected 2021-07-20
  3. Disclosed 2021-08-12
  4. 24 days

Attack or cause

Method
[Misdelivery]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Health data]

Organizations involved

Open in organization search

Sources

  1. [1][News]専用回線の通信システムで個人情報誤送信ScanNetSecurity · 2021-08-23 08:00