> JapanHacked_
[Resolved][Severity: Major][Misdelivery]

Mitsuuroko Vessel: customer data of 5,259 Mitsuuroko Hikari subscribers, used to check billing statements, was mistakenly sent to one corporate client

When emailing a billing statement, it mistakenly attached check data with names, addresses, phone numbers and billed amounts of 5,259 customers. The recipient deleted it all.

Disclosed

2021-08-19

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. Around 18:00, when emailing a billing statement to a corporate client of Mitsuuroko Hikari, it also mistakenly sent the customer data used to check the statement. [1]

  2. It recognized the leak and asked the recipient to delete the data. [1]

  3. Around 10:00, it confirmed all the data had been deleted and had not reached any third party. [1]

  4. It submitted a report to the Kanto Bureau of Telecommunications of the Ministry of Internal Affairs and Communications. [1] [2]

  5. It announced the case. [1] [2]

Information sent

Names, addresses, phone numbers and billed amounts of 5,259 Mitsuuroko Hikari subscribers. [1]

Timeline

  1. Started 2021-07-29
  2. Detected 2021-07-31
  3. Disclosed 2021-08-19
  4. 21 days

Attack or cause

Method
[Misdelivery]
Impact
[Data leak]
Entry point
E-mail

Data exposed or at risk

[Name][Postal address][Phone number]

Organizations involved

Open in organization search

Sources

  1. [1][Official]お客さま情報の漏えいに関するお知らせとお詫びMitsuuroko Vessel Co., Ltd. · 2021-08-19
  2. [2][News]「ミツウロコ光」契約者の個人情報を誤送信、総務省関東総合通信局にも報告ScanNetSecurity · 2021-08-27 08:00