SHINDO3

Kanko Shop Morioka

533 people533people

LEAK CONFIRMEDEmail addressMisdelivery · Closed (final report)

Open in the live monitor ▶
Disclosed
Apr 24, 2026
Detected
Mar 28, 2026
Detection to disclosure
27 days
Leak
Leak confirmed
Type
Misdelivery
Status
Closed (final report)
Security spend
Not checked yet
Compensation
Not announced

What leaked

ContactEmail address

How many

  • 533 people 533 people

Who is affected

  • Customers who bought school uniforms at the shop

Cause

In an email about uniform pick-up times and places, addresses were put in the visible To field so recipients could see each other's addresses

Timeline

  1. Found after a recipient pointed it out
  2. Exposure began
  3. Security NEXT report date; the organization's own announcement date was not confirmed

Response

  • Notified individuals

Apologized to the recipients by email and asked them to delete the message

What you should do

  1. Don't open links in emails from this company. The apology email itself may be fake
  2. Check the company's notice to see if you're affected

Lessons for companies

  1. Use DLP: recipient checks, send delay, automatic attachment protection
  2. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  3. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources