Otsuka: email sent to the wrong address leaked names of 2,687 customers
Otsuka Shokai announced on 19 April 2024 that an employee had sent a file containing personal data as an email attachment to the wrong recipient, leaking personal data of 2,687 customers. At 17:25 on 14 February 2024, a file used to build an internal system that assigns engineers to customers of its Tayoreru service and multifunction printer maintenance was sent to one outside person because the address was typed in by hand incorrectly. The employee found the mistake on 19 February. The file contained the names of business customers registered under a personal name, such as sole proprietors, but no addresses, phone numbers, email addresses or transaction details. As of 19 April the recipient had not replied and deletion had not been confirmed. No further leak has been found.
Disclosed
2024-04-19
Organizations involved
1
Leaked or at risk
2.7K
2,687
Downtime
Unknown
Timeline
- Started 2024-02-14
- Detected 2024-02-19
- Disclosed 2024-04-19
- 65 days
Attack or cause
- Method
- [Misdelivery]
- Impact
- [Data leak]
- Entry point
Data exposed or at risk
Organizations involved
[Breached][Moderate]Tokyo, ChiyodaInformation and communications2,687 leaked
Otsuka Corporation
Sources
- [1][Official]メール誤送信に関するお詫びとお知らせOtsuka · 2024-04-19