According to Security NEXT, an improperly configured application file on the website for Fukuoka Prefecture's nursing care workplace certification program allowed personal data of 183 corporate officers across 24 organizations to be viewed by third parties [1]. Between August 21 and September 17, 2026, a contractor mistakenly configured the file to allow online editing and saving, leaving entered names, dates of birth, genders, and job titles accessible online [1]. The prefecture discovered the issue after receiving an inquiry from an applicant, ordered the file removed, and telephoned all 24 affected organizations to explain and apologize [1].
Fukuoka Prefecture Application File Left Open for Online Editing, Exposing Personal Data of 183 Corporate Officers
1 min read
- Disclosed
- Nov 5, 2026
- Published
- Nov 10, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Government
What to do nowOur advice
The prefecture discovered the issue after receiving an inquiry from an applicant, ordered the file removed, and telephoned all 24 affected organizations to explain and apologize [1]
Timeline
- Security NEXT publishes report (date only; timestamp is a placeholder)[1]
Technical details
Source-Verified Summary
An improperly configured application file on the website for Fukuoka Prefecture's nursing care workplace certification program allowed personal data of 183 corporate officers across 24 organizations to be viewed by third parties. [1]
Between August 21 and September 17, 2026, a contractor mistakenly configured the file to allow online editing and saving, leaving entered names, dates of birth, genders, and job titles accessible online. [1]
The prefecture discovered the issue after receiving an inquiry from an applicant, ordered the file removed, and telephoned all 24 affected organizations to explain and apologize. [1]
References
Media1
- [1]
“福岡県は、ウェブサイトに掲載した認証制度の申請用ファイルの設定不備により、法人役員の個人情報が閲覧可能になっていたことを明らかにした。”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.