> JapanHacked_
[Contained][Severity: Major][Misconfiguration]

Fukui City: masking in disclosed files could be removed, exposing data on 1,628 people and 132 corporations

Partly disclosed records handed out as data files had masking that could be removed, exposing names, addresses and other details of 1,628 people and 132 corporations.

Disclosed

2026-11-02

Organizations involved

1

Leaked or at risk

1.6K

1,628

Downtime

Unknown

What happened

  1. A citizen who had requested records reported that masked parts could be read. [1]

  2. The city confirmed that the masking could be removed with certain steps. [1]

  3. The city announced the issue and mailed apologies to those whose addresses it knew. [1] [2]

Impact

The issue covers 41 documents, affecting 1,628 people (counting repeats) and 132 corporations. The masked parts include names, addresses, dates of birth, phone numbers and email addresses. No misuse has been found. [1]

By 2 November, 13 sets had been returned and replaced with paper copies. According to the Fukui Shimbun, requesters reported deleting another 13, and the requesters of 2 do not intend to return them. [1] [2]

Cause

From May 2025, partly disclosed records were also handed out as data on CD-R, although city rules allowed data copies only for fully disclosed records. Checks that the masking was done safely were also lacking. [1] [2]

Timeline

  1. Detected 2026-10-01
  2. Disclosed 2026-11-02
  3. 32 days

Attack or cause

Method
[Misconfiguration]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Postal address][Date of birth][Phone number][E-mail address]

Organizations involved

Sources

  1. [1][Official]公文書開示請求等における一部開示文書の情報漏えい等についてFukui City · 2026-11-02
  2. [2][News]福井市の一部開示文書、黒塗り部分を外して閲覧できる状態に 情報漏えい可能性、陳謝Fukui Shimbun · 2026-11-03 06:00