SHINDO1

DENSO

DENSO CORPORATION

MisconfigurationSize not disclosed

EXPOSEDFull name / Job titleClosed (final report)

Open in the live monitor ▶
Disclosed
Oct 20, 2025
Detected
Oct 20, 2025
Detection to disclosure
Same day
Leak
Exposed, access unknown
Type
Misconfiguration
Status
Closed (final report)
Security spend
Not checked yet
Compensation
Not announced

What leaked

IdentityFull name, Age
Employment & HRJob title, Department

Who is affected

  • Employees and contract employees
  • Seconded staff

Cause

In Microsoft Power BI, used for data visualization and analysis, permissions on several datasets were set so the whole group could view them instead of only staff who needed them

Timeline

  1. Discovered through a report from an employee
  2. Date of the Security NEXT report

Response

  • Access review
  • Config review
  • Notified individuals

What you should do

  1. Expect targeted phishing posing as HR or interview contacts
  2. Check the company's notice to see if you're affected

Lessons for companies

  1. Two-person review and pre-release tests for sharing and cache changes; monitor cloud config (CSPM)
  2. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  3. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources