GovTech東京(東京アプリ)Data breach / unauthorized access incident
- Occurred on
- July 11, 2026
- Announced on
- July 15, 2026
- Severity
- BIncidents centered on names and contact details.
- Scale
- 1 people
- Main impact
- It has been confirmed that one person's name, phone number, and email address were mistakenly sent to another user.
- Information involved
- Email addressPhone numberFull name
- Cause / key point
- Insufficient verification by the contracted vendor when sending the email.
- Industry
- IT & telecom
- Listing / capital
- Unlisted
- Last updated
- October 20, 2026
Is this incident worth paying attention to?
Written & reviewed

Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Same attack method
- B京都サンガF.C.2026.09.08 announced・Affected 15,612 people
- B沖縄県立芸術大学2026.10.02 announced・Affected 207 people
- C大阪市総合生涯学習センター(メール)2026.09.08 announced・Affected 168 people
- Dデジタル庁(国家資格システム)2026.08.07 announced・Affected 150 people
- CCLASS EARTH株式会社2026.10.07 announced・Affected 69 records
- C神奈川県消防保安課(事業者へのメール誤送信)2026.10.14 announced・Affected 55 records
Same industry
- SSEストアー(ショップサーブ)2026.10.16 announced・Affected 23,356,000 people
- SSソースネクスト2026.10.15 announced・Affected 22,519,960 records
- SSコミューン(Commune・Commune for Work)2026.10.09 announced・Affected 307,000 people
- SSIDCフロンティア(IDCFクラウド)2026.10.07 announced・Affected 48 records
- SS楽天ドライブ2026.10.06 announced・Affected 15,382 accounts
- SSHelpfeel(Gyazo)2026.09.16 announced・Affected 23,620,000 records
Attack method classification: Misdirected sending & disclosure (human error)(Leaks caused by wrong recipients or exposure settings)
Read the Misdirected sending & disclosure (human error) guide and national trends →