SHINDO3

Shizuoka Prefectural Police Headquarters

Personal data14,239people

EXPOSEDPhone number / Full nameMisconfiguration · Closed (final report)

Open in the live monitor ▶
Disclosed
May 22, 2026
Detected
Apr 28, 2026
Detection to disclosure
24 days
Leak
Exposed, access unknown
Type
Misconfiguration
Status
Closed (final report)
Security spend
Not checked yet
Compensation
Not announced

What leaked

IdentityFull name
ContactPhone number

How many

  • Names and phone numbers in 10 public documents 14,239 people
  • People in the 3 documents not yet recovered 4 people

Who is affected

  • People listed in registers of safe-driving managers, adult-entertainment businesses, pawn shops, detective agencies and others

Cause

Worried about loss of resolution, a staff member skipped the required step of converting the PDFs to images and only laid black shapes over the text, so the text remained and could be read with special software

Timeline

  1. Start of release of insufficiently redacted PDFs
  2. Last release in the period
  3. Problem discovered
  4. Announced

Response

  • Data deleted
  • Change process

Recovered 7 of the 10 documents (14,235 people) and reissued corrected versions

What you should do

  1. Treat refund or apology calls and texts as scams. Call back only on the number from the official site
  2. Check the company's notice to see if you're affected

Lessons for companies

  1. Two-person review and pre-release tests for sharing and cache changes; monitor cloud config (CSPM)
  2. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  3. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources