According to Security NEXT, on December 10, 2025, the Nara Prefectural Welfare Center for the Visually Impaired misdirected an email when contacting volunteer group members [1]. The email sent to 126 individuals mistakenly placed recipient addresses in the 'To' field, allowing recipients to view each other's email addresses and names [1]. The volunteer communication terminal used did not have the prefectural email system's automatic BCC conversion feature applied, and the staff member discovered the issue from quoted text in a reply [1].
Nara Prefecture Welfare Center Mistakenly Sends Email to 126 Volunteers with Visible Recipient Names and Addresses
1 min read
- Disclosed
- Dec 29, 2025
- Published
- Nov 10, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Government
What to do nowOur advice
The volunteer communication terminal used did not have the prefectural email system's automatic BCC conversion feature applied, and the staff member discovered the issue from quoted text in a reply [1].
Timeline
- Security NEXT publishes report (date only; timestamp is a placeholder)[1]
Technical details
Verified Source Summary
On December 10, 2025, the Nara Prefectural Welfare Center for the Visually Impaired misdirected an email when contacting volunteer group members [1].
The email sent to 126 individuals mistakenly placed recipient addresses in the 'To' field, allowing recipients to view each other's email addresses and names [1].
The volunteer communication terminal used did not have the prefectural email system's automatic BCC conversion feature applied, and the staff member discovered the issue from quoted text in a reply [1].
References
Media1
- [1]
“奈良県は、視覚障害者福祉センターのボランティア団体にメールを送信した際にミスがあり、個人情報が流出したことを明らかにした。”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.