> JapanHacked_
[Contained][Severity: Major][Misdelivery]

biima: a CSV of about 23,000 members' data was attached by mistake and sent to 53 members, leaking account details and more

A CSV holding personal data of about 23,000 people was attached by mistake to an email sent to 53 members, leaking bank account details and more.

Disclosed

2024-11-13

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It reported to the Personal Information Protection Commission and announced the misdelivery of member information the same day. [1] [2]

  2. It asked all 53 recipients by phone to delete the email and file and obtained verbal confirmation of deletion from all 53. It said it had found no leak beyond those 53. [1]

Impact

A CSV with personal and bank account information of about 23,000 people reached 53 members. After consulting experts and financial institutions, it said this information alone could not be used to withdraw money from an account. [1]

Timeline

  1. Disclosed 2024-11-13
  2. 1 days

Attack or cause

Method
[Misdelivery]
Impact
[Data leak]
Entry point
E-mail

Data exposed or at risk

[Bank account]

Organizations involved

Open in organization search

Sources

  1. [1][Official]【重要】個人情報誤送信に関する対応状況について（11/19時点）biima Inc. · 2024-11-19
  2. [2][News]約 2.3 万人分の個人情報が記載された CSV データを誤添付し 53 名へ送信ScanNetSecurity · 2024-11-21 08:05