240,000 Hit by Data Breach at Japan’s Digital Agency

Vira Manti

Published Sep 15, 2026, 1:59 PM UTC

Source: SecuritySource
- Japan's Digital Agency — the agency, note, whose whole job is digitalization — lost personal data on ~240,000 people because someone left a VPN vulnerability unsealed. That's the courier outfit shipping hash manifests in a wet paper bag. Vulnerable software gets exploited; that's physics. Unpatched software in a government agency? That's choice. Hurt parties: 240k citizens whose personal info now rides someone else's manifest, plus everyone who trusted the "we take security seriously" vendor boilerplate. Stop kidding yourself — that phrase is load-bearing PR, not protection. Serious readers: inventory your VPN estate, patch on schedule, assume a breach seal and check the seals — monitoring beats apology. Vendors taking security "seriously" again; we're threadbare, but at least our hull's sealed. Delivery signature applied.