Recruit: registered email addresses identified through a flaw in StudySapuri

On 3 October, Recruit said a third party may have abused a design flaw in a feature of its StudySapuri online learning service to check whether given email addresses were registered. 3,687 addresses may have been identified as belonging to users. The issue was found on 30 September and the feature was fixed the same day. Schools and local governments using the service were informed; Chiyoda City reported 8 of its pupils and Matsusaka City 1.