Shikoku Create Association: unauthorized website administrator puts 146 submissions from 92 people at risk

An unauthorized administrator account was found on 4 November, apparently created through a website flaw on 20–21 July. At-risk data comprises 124 inquiries and 22 job applications: 146 submissions from 92 people. Fields include names, contacts, employers, job preferences and free text, varying by form. Submissions are not a person count. [1]

Available records show no use of the account to log into administration, tamper with the site, install malicious programs or acquire personal data; exposure cannot be ruled out. On 4 November, it removed the account, changed credentials, updated software, restricted administration and stopped storing form submissions on the site. The PPC was notified and individual notification is planned. [1]