Japan's Digital Agency reports potential leak of 13,000 inquiries

Japan's Digital Agency announced on October 22 that personal information from up to 13,323 inquiries may have been leaked due to unauthorized access to 'Studio', a no-code web production service used for site operations.

The potential leak involves data submitted via inquiry forms between May 2021 and March 2023. This includes general opinions, inquiries regarding COVID-19 vaccination certificate apps, workshop participation, recruitment, and mascot character loans. Compromised data points may include names, email addresses, inquiry details, and in some cases, affiliations, addresses, or phone numbers.

Additionally, 35 Studio account details belonging to Digital Agency staff or contractors, including names and email addresses, may have been exposed. The breach was discovered following a report from Studio's operator on October 16, noting that a third party gained unauthorized access to a cloud environment. While no secondary damage has been confirmed as of October 22, the agency has urged the public to remain vigilant against suspicious emails, calls, or SMS messages.