SHINDO3

Yaese Town

MisconfigurationSize not disclosed

EXPOSEDFull name / Billed / transaction amountClosed (final report)

Open in the live monitor ▶
Disclosed
May 22, 2026
Detected
Apr 2, 2026
Detection to disclosure
50 days
Leak
Exposed, access unknown
Type
Misconfiguration
Status
Closed (final report)
Security spend
Not checked yet
Compensation
Not announced

What leaked

IdentityName
ContactRegion
Financial & paymentDonation amount
Transactions & activityChosen use of donation

Who is affected

  • Donors who asked not to be named or gave no preference

Cause

Settings and procedures on the donation portal may not have been carried out correctly

Timeline

  1. Period of affected donations (to 31 December 2024)
  2. The portal operator pointed it out
  3. Posted information hidden
  4. Reported to authority
  5. First disclosure

Response

  • Notified individuals

Will notify and apologize to donors individually

What you should do

  1. Watch for unexpected mail or invoices; your address is hard to change
  2. Check the company's notice to see if you're affected

Lessons for companies

  1. Two-person review and pre-release tests for sharing and cache changes; monitor cloud config (CSPM)
  2. Don't keep ID or bank data: delete after checks or use a KYC provider
  3. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  4. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources