SHINDO2

Matsuyama City

Personal data125people

LEAK CONFIRMEDEmail address / Full nameMisdelivery · Closed (final report)

Open in the live monitor ▶
Disclosed
Jul 29, 2026
Leak
Leak confirmed
Type
Misdelivery
Status
Closed (final report)
Security spend
Measures, no amount
Compensation
Not announced

What leaked

ContactEmail address
IdentityNames shown in some display names

How many

  • New and prospective farmers 125 people

Who is affected

  • New farmers (certified or prospective)

Cause

The agricultural guidance center put recipients in the To field instead of BCC

Timeline

  1. Exposure began
  2. First disclosure

Response

  • Data deleted
  • Staff training
  • Change process

Apologized to recipients and asked them to delete the email. Staff retrained; double checks required for emails to multiple recipients

What you should do

  1. Don't open links in emails from this company. The apology email itself may be fake
  2. Check the company's notice to see if you're affected

Lessons for companies

  1. Use DLP: recipient checks, send delay, automatic attachment protection
  2. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  3. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources