According to Security NEXT, the Tokyo Metropolitan Bureau of Waterworks discovered on October 2, 2026, that only empty storage boxes remained inside a locked cabinet while four hard drives were missing [1]. The hard drives stored land management and utilization data containing the names of 1,932 corporate, government, and resident individuals, with some records also including addresses or phone numbers [1]. In a separate incident on October 20, an outsourced contractor employee left a bag on a train, losing documents containing names, addresses, phone numbers, and interaction logs for 84 customer households [1].
Tokyo Metropolitan Bureau of Waterworks Reports Four Missing Hard Drives and Contractor Loss of Customer Documents
1 min read
- Disclosed
- Nov 5, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Government
What to do nowOur advice
In a separate incident on October 20, an outsourced contractor employee left a bag on a train, losing documents containing names, addresses, phone numbers, and interaction logs for 84 customer households [1].
Timeline
- Security NEXT publishes report (date only; timestamp is a placeholder)[1]
Technical details
Source-Verified Summary
The Tokyo Metropolitan Bureau of Waterworks discovered on October 2, 2026, that only empty storage boxes remained inside a locked cabinet while four hard drives were missing [1].
The hard drives stored land management and utilization data containing the names of 1,932 corporate, government, and resident individuals, with some records also including addresses or phone numbers [1].
In a separate incident on October 20, an outsourced contractor employee left a bag on a train, losing documents containing names, addresses, phone numbers, and interaction logs for 84 customer households [1].
References
Media1
- [1]
“東京都水道局において、ハードディスクや書類など、個人情報の紛失事故が複数発生した。”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.