Mitsuuroko Vessel: customer data of 5,259 Mitsuuroko Hikari subscribers, used to check billing statements, was mistakenly sent to one corporate client
When emailing a billing statement, it mistakenly attached check data with names, addresses, phone numbers and billed amounts of 5,259 customers. The recipient deleted it all.
Disclosed
2021-08-19
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
Around 18:00, when emailing a billing statement to a corporate client of Mitsuuroko Hikari, it also mistakenly sent the customer data used to check the statement. [1]
It recognized the leak and asked the recipient to delete the data. [1]
Around 10:00, it confirmed all the data had been deleted and had not reached any third party. [1]
It submitted a report to the Kanto Bureau of Telecommunications of the Ministry of Internal Affairs and Communications. [1] [2]
Information sent
Names, addresses, phone numbers and billed amounts of 5,259 Mitsuuroko Hikari subscribers. [1]
Timeline
- Started 2021-07-29
- Detected 2021-07-31
- Disclosed 2021-08-19
- 21 days
Attack or cause
- Method
- [Misdelivery]
- Impact
- [Data leak]
- Entry point
Data exposed or at risk
Organizations involved
[Breached][Major]Tokyo, ChuoWholesale and retail trade5,259 leaked
Mitsuuroko Vessel Co., Ltd.
Sources
- [1][Official]お客さま情報の漏えいに関するお知らせとお詫びMitsuuroko Vessel Co., Ltd. · 2021-08-19
- [2][News]「ミツウロコ光」契約者の個人情報を誤送信、総務省関東総合通信局にも報告ScanNetSecurity · 2021-08-27 08:00