SHINDO3

PMDA

Pharmaceuticals and Medical Devices Agency

Company and PMDA staff286people

POSSIBLE LEAKTrade secrets / Full nameLoss · Closed (final report)

Open in the live monitor ▶
Disclosed
Aug 7, 2026
Detected
Apr 16, 2026
Detection to disclosure
113 days
Leak
Leak possible
Type
Loss
Status
Closed (final report)
Security spend
Not checked yet
Compensation
Not announced

What leaked

IdentityAffiliations and names of 286 people
Employment & HRAffiliations and names of 286 people
Business dataReview reports, internal deliberation papers, Pharmaceutical Affairs and Food Sanitation Council materials, approval documents for two products, and consultation records

How many

  • Company and PMDA staff 286 people

Who is affected

  • Company staff
  • PMDA staff

Cause

A staff member took a work USB stick off-site against the rules and lost it

Timeline

  1. Loss discovered; later reported to the police
  2. First disclosure

Response

  • Governance / committee
  • Staff training

Banned the use of USB sticks, informed staff and ran special training

What you should do

  1. Expect targeted phishing posing as HR or interview contacts
  2. Check the company's notice to see if you're affected

Lessons for companies

  1. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  2. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources