Japan Digital Agency confirms data breach of 13,323 user records
A security breach at the Japan Digital Agency has exposed over 13,000 personal records submitted through websites developed on the Studio AI platform.
The Japan Digital Agency reported on October 22 that an unauthorized access incident occurred on several of its websites built using the Studio AI site-building platform. The breach resulted in the exposure of 13,323 pieces of personal data submitted by the public between May 2021 and March 2023.
The compromised information includes names, email addresses, and inquiry content. Specifically, the leaked data covers 8,833 general inquiries, 3,661 questions regarding vaccination certificates, 462 workshop registration details, 250 recruitment inquiries, and 117 requests related to mascot costume rentals. Some records may also include organizational affiliations, physical addresses, and telephone numbers.
As of the announcement, the agency stated there is no evidence that the leaked data has been misused. The government has advised the public to remain vigilant against phishing attempts, noting that official communications will not request passwords or credit card information via email or telephone.
This incident highlights ongoing cybersecurity challenges for government entities utilizing third-party web development tools. The agency is currently investigating the vulnerability to prevent further unauthorized access.