> JapanHacked_
[Contained][Severity: Critical][Misconfiguration]

DAISO: Google Groups left publicly visible

An April 26 warning revealed that mail in 57 groups was public; access was restricted that day. The notice listed 4,498 customer, 4,578 business-contact, 698 applicant and 533 employee entries. No deduplicated total across these groups was stated. Exposure dated back to December 9, 2019; some entries included bank-account information.

Disclosed

2025-06-18

Organizations involved

1

Leaked or at risk

4.6K

4,578

Downtime

Unknown

Timeline

  1. Started 2019-12-09
  2. Detected 2025-04-26
  3. Disclosed 2025-06-18
  4. 2018 days

Attack or cause

Method
[Misconfiguration]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Postal address][Phone number][E-mail address][Bank account][Gender][Date of birth][Employment][Health data]

Organizations involved

Open in organization search

Sources

  1. [1][Official]Googleグループを通じた個人情報の漏えいの可能性に関するお詫びDaiso Industries Co., Ltd. · 2025-06-18