bleeping-computer · Crawled Sep 15, 2026

Japan's Digital Agency says VPN flaw exposed 246,000 personnel records

Read original article ↗

AI Summary

Japan's Digital Agency disclosed a data breach resulting from exploitation of a vulnerability in a VPN device used by the Government Solution Service (GSS). The attacker gained unauthorized access by exploiting the flaw, leading to potential exposure of approximately 246,000 records containing personal information of government employees and associated individuals. The exposed data includes names, email addresses, telephone numbers, and physical addresses, though sensitive identifiers such as My Number, bank accounts, and pension numbers were not compromised. The agency contained the breach by suspending the compromised account and isolating the affected system, with no evidence of data misuse found to date.

AI-extracted · verify before operational use

No entities or IoCs were extracted from this article.