SHINDO3

Tokyo Metropolitan Foundation for Sports and Culture

Referee list109people

POSSIBLE LEAKPostal address / Documents / filesLoss · Closed (final report)

Open in the live monitor ▶
Disclosed
Jan 13, 2026
Detected
Nov 25, 2025
Detection to disclosure
49 days
Leak
Leak possible
Type
Loss
Status
Closed (final report)
Security spend
Not checked yet
Compensation
Not announced

What leaked

IdentityName
ContactAddress (consent forms)
Communications & contentSignatures and seal impressions (consent forms)

How many

  • Referee list 109 people
  • Consent forms 14 people

Who is affected

  • Marathon referees at the Tokyo 2025 Deaflympics

Cause

Lists were brought to the venue for attendance checks and consent forms were collected on site, but document control was inadequate

Timeline

  1. Kept at the marathon venue operations center
  2. Loss found when checking storage
  3. Security NEXT report date

Response

  • Notified individuals

Explained to the affected referees and apologized

What you should do

  1. Watch for unexpected mail or invoices; your address is hard to change
  2. Expect targeted phishing posing as HR or interview contacts
  3. Check the company's notice to see if you're affected

Lessons for companies

  1. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  2. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources