According to Security NEXT, on December 12, 2025, the Tokyo Metropolitan Government sent a webinar notification via its staff recruitment examinee portal to 9,086 applicants [1]. Because individual recipient names and login IDs were not properly configured, the body of every email contained the name and login ID of the same examinee [1]. The Metropolitan Government deleted the affected ID, apologized to the affected examinee and recipients, and requested that recipients delete the misdirected email [1].
This event has not been officially confirmed. Content is based on media or third-party reports.
Backfill: this event became public on Dec 25, 2025 and we added it on Nov 10, 2026. It is not a new event.
HighMonitoringBackfillMedia reported
Tokyo Metropolitan Government Recruitment Webinar Notice Mistakenly Exposes One Applicant's Account to 9,086 Recipients
1 min read
- Disclosed
- Dec 25, 2025
- Published
- Nov 10, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Government
What to do nowOur advice
The Metropolitan Government deleted the affected ID, apologized to the affected examinee and recipients, and requested that recipients delete the misdirected email [1].
Timeline
- Security NEXT publishes report (date only; timestamp is a placeholder)[1]
Technical details
Verified Source Summary
On December 12, 2025, the Tokyo Metropolitan Government sent a webinar notification via its staff recruitment examinee portal to 9,086 applicants [1].
Because individual recipient names and login IDs were not properly configured, the body of every email contained the name and login ID of the same examinee [1].
The Metropolitan Government deleted the affected ID, apologized to the affected examinee and recipients, and requested that recipients delete the misdirected email [1].
References
Media1
- [1]
“東京都は、都職員採用試験申込者へメールでセミナーを案内した際、本文中に誤った個人情報が記載される不備があったことを明らかにした。”
Expert help
Still not sure whether this affects you?
Tell us about your environment. We'll check it against this advisory, assess the risk, and give you concrete patch and monitoring steps.
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.