Japanese energy firm loses drive with data of 10.9 million clients
Japanese energy firm loses external drive with data of 10.9 million clients.
Kyushu Electric Power Co. has reported a physical security incident where an external storage drive containing the personal data of up to 10.9 million customers went missing from a locked server room cabinet. The drive, used for regular backups, was discovered missing on May 26th, with the cabinet found unlocked. The company has filed a police report and notified Japanese authorities, including the Personal Information Protection Commission.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Kyushu Electric Power Co., Inc.?
Get an email when a new story names Kyushu Electric Power Co., Inc., usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonKyushu Electric Power Co. suffered a severe data breach when a backup drive containing 10.9 million customer records disappeared from a supposedly secure server room cabinet that was found unlocked. This incident highlights critical failures in physical security controls and data protection practices. The breach demonstrates how inadequate physical safeguards can render encryption and other technical controls meaningless, potentially exposing millions of customers to identity theft and privacy violations. Organizations must treat backup media with the same security rigor as production systems, especially when containing sensitive personal information.
What helps against this
How we list vendors- Data loss prevention (DLP)
Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.
- Encryption and key management
Stolen data stays unreadable, and the keys stay under your control.
- Immutable backup and recovery
Ransomware cannot delete or encrypt your way back.