Osaka city and prefecture disclosed separate data leaks on the same day, including about 1.08 million email addresses from a city administrative system and ID images belonging to 12 prefecture coupon applicants.
The city said on the 13th that email addresses of users of its online administrative system had leaked. The system's contracted operator used an email delivery service run by Arara, which came under cyberattack.
According to the city's digital policy office, the leaked addresses number 1,078,713. They were used between July 1 and October 31 for usage guidance, registration and password-change procedures.
The city sent a blanket email in September promoting the system's convenience, which swelled the scale of the leak. Separately, Arara was also used for this fiscal year's premium gift certificate program, and about 48,000 email addresses from that program also leaked.
“We apologize to users. Please do not open suspicious emails, and do not reply to them or enter any information.”Osaka Mayor Hideyuki Yokoyama, mayor of Osaka
Prefecture coupon program
The prefecture, meanwhile, said its system for a program distributing rice coupons and other benefits to households with children and to young people suffered unauthorized access. Image data from My Number cards, driver's licenses and health insurance cards belonging to 12 applicants in total leaked.
The prefecture runs the coupon program as part of its measures against rising prices. It accepted about 1.4 million applications between March 26 and June 25 this year.
The prefecture said it has confirmed no misuse of the leaked data and no leaks involving anyone beyond the 12 people.