> JapanHacked_
[Resolved][Severity: Major][Misconfiguration]

National Tax Agency: other people's gift tax returns visible in e-Tax My Page

On 2 October, the National Tax Agency said that the gift tax section of e-Tax My Page showed other people's gift tax returns from 8:30 on 24 September to midnight, and from 4:00 to 15:58 on 25 September. A bug introduced by a system change on 24 September to add features caused it. Returns of 79 people may have been viewed by 19 others, and with donors and tax accountants named in them, personal data of 203 people is affected.

Disclosed

2026-10-02

Organizations involved

1

Leaked or at risk

203

203

Downtime

Unknown

Timeline

  1. Started 2026-09-24
  2. Detected, Resolved 2026-09-25
  3. Disclosed 2026-10-02
  4. 8 days

Attack or cause

Method
[Misconfiguration]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Name]

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][News]79人分贈与税申告書表示か e-Tax、改修不具合でNikkei · 2026-10-02
  2. [2][News]国税庁e-Taxで79人分の申告書を他人が閲覧した可能性、KSK2とは別の不具合Nikkei xTECH · 2026-10-05
  3. [3][News]「e-Tax」で他人の贈与税情報が一時閲覧可能に 国税庁TV Asahi · 2026-10-02