According to Security NEXT, during an inventory check on September 9, 2026, Nara Prefecture discovered that a USB flash drive used for data exchange with its pharmaceutical and medical device application review system was missing [1]. Usage logs showed the drive was last connected to a prefectural terminal on August 25; although the data on the drive was encrypted, it may hold personal information for 363 individuals [1]. Potentially affected data includes names, addresses, dates of birth, and representative or contact names of corporate managers, as well as internal information such as manufactured product items for 15 companies [1].
Nara Prefecture Business USB Drive Missing, Potentially Containing Data on 363 Individuals and 15 Companies
1 min read
- Disclosed
- Nov 5, 2026
- Published
- Nov 10, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Government
What to do nowOur advice
Potentially affected data includes names, addresses, dates of birth, and representative or contact names of corporate managers, as well as internal information such as manufactured product items for 15 companies [1].
Timeline
- Security NEXT publishes report (date only; timestamp is a placeholder)[1]
Technical details
Verified Source Summary
During an inventory check on September 9, 2026, Nara Prefecture discovered that a USB flash drive used for data exchange with its pharmaceutical and medical device application review system was missing [1].
Usage logs showed the drive was last connected to a prefectural terminal on August 25; although the data on the drive was encrypted, it may hold personal information for 363 individuals [1].
Potentially affected data includes names, addresses, dates of birth, and representative or contact names of corporate managers, as well as internal information such as manufactured product items for 15 companies [1].
References
Media1
- [1]
“奈良県は、個人情報が保存された業務用USBメモリが所在不明になっていることを明らかにした。”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.