> JapanHacked_
[Contained][Severity: Critical][Misconfiguration]

Sunnet: inquiry attachments left publicly accessible

A March 3 warning revealed publicly accessible web-form attachments caused by incorrect security settings; access was restricted that day. The final report recorded 2,614 exposed entries concerning 1,524 establishments. Attachments were removed on March 12 and the form was retired on March 13.

Disclosed

2025-03-06

Organizations involved

1524

Leaked or at risk

2.6K

2,614

Downtime

Unknown

Timeline

  1. Detected 2025-03-03
  2. Disclosed 2025-03-06
  3. 3 days

Attack or cause

Method
[Misconfiguration]
Impact
[Data leak]
Entry point
Web app
Affected, as stated
1,524

Data exposed or at risk

[Name][Postal address][Phone number][E-mail address][Bank account]

Organizations involved

Open in organization search

Sources

  1. [1][Official]情報漏えいに関するお詫びと報告（第一報）Sunnet Inc. · 2025-03-06
  2. [2][Official]情報漏えいに関するお詫びと報告（確報）Sunnet Inc. · 2025-03-29