> JapanHacked_
[Resolved][Severity: Major][Misdelivery]

Digital Agency: in a press email it put 408 journalists' addresses in CC instead of BCC

In an email sending press material, it put 408 email addresses in CC, making them visible to every recipient.

Disclosed

2021-11-24

Organizations involved

1

Leaked or at risk

408

408

Downtime

Unknown

What happened

  1. At 14:40 it sent a press material email, with 408 journalists' addresses in CC instead of BCC. At 18:56 it sent an apology and a request to delete the email. [1] [3]

  2. It published the cause and countermeasures. [1]

Cause

One staff member worked alone and did not check the recipient field. One earlier case of the same mistake was also found. [1]

Timeline

  1. Started, Detected, Disclosed 2021-11-24
  2. 1 days

Attack or cause

Method
[Misdelivery]
Impact
[Data leak]
Entry point
E-mail

Data exposed or at risk

[E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][Official]メールの宛先の誤りについてDigital Agency · 2021-11-26
  2. [2][News]デジ庁がメールアドレス流出、記者ら400件 BCCとCC取り違えThe Asahi Shimbun · 2021-11-25
  3. [3][News]デジタル庁、報道機関向けのメール誤送信 アドレス400件をBCCではなくCCに記載ITmedia Business Online · 2021-11-24