shizuoka-form-exposure-2026 · Disclosed 2026-08-19
静岡県: data exposure and authorization boundaries
A Google Forms response-summary setting exposed other applicants’ answers. Names, phone numbers and related data for 109 disaster-preparedness trainees were exposed.
Outcome: Exposure / potential leak. Third-party theft unconfirmed.
Entry path and evidence
Timeline
Disclosure date established by the reviewed notice. [s1]
Reported response
- Reported fact
The visibility setting was fixed immediately and affected people informed.
[s1]p.1 §§1-4
Evidence relevant to prevention
Operational controls to inspect
Inspect the disclosed configuration, authorization or operational issue. Verify applicability and retain evidence of behavior after remediation.
Editorial assessment; not a determination of liability. [s1]
Unknowns and AI involvement
The reviewed disclosures do not establish attacker use of AI.
Actual access by third parties remains unconfirmed; exposure resulted from the published Forms response-summary setting.
Sources
[s1] 静岡県 · Primary source
静岡県：事故に関する公表資料 ↗Reviewed 2026-10-09