PERSOL Cross Technology: an account setup error in a health checkup reservation system let a group company's HR staff download data on 11,704 employees

1. 2025-05-16

   From this day until June 20, a mistake by the trustee that runs the health checkup reservation work during account creation left group company HR staff able to view and download data on PERSOL Cross Technology employees. [1]

2. 2025-06-20

   A group company HR staff member noticed that the screen showed employee data of another company and reported it to the trustee. A log check found that another HR staff member had downloaded the data. [1]

3. 2025-06-27

   It confirmed that the data had not been copied or forwarded and had been deleted. [1]

4. 2025-07-14

   It announced the incident and reported it to the Personal Information Protection Commission and others. [1] [2]

The data covers 11,704 employees and dispatched staff who were due for the fiscal 2024 health checkups (regular and night-work). It includes name, gender, date of birth, employee number, health insurance card symbol and number, checkup target flags and insurance eligibility, and for those who took a checkup, the reservation ID, confirmed date, clinic name, checkup date and course name. Checkup results are not included. It confirmed that the download was work the group company needed in order to check the checkup status of its own staff, and found no secondary leak. [1] [2]