Former contractor's lingering cloud account leads to leak of unreleased product plans

A small crowdfunding company in Japan discovered that its unreleased product plans had surfaced at a competitor just weeks before launch. Investigation of access logs revealed that a former outsourced staffer, whose contract had ended months earlier, still had active access to the company's cloud storage and had downloaded the new product materials. The contractor said they had accessed the files out of curiosity and shared them with an acquaintance, without intending harm, and the full extent of the spread could not be traced. The case highlights guidance from Japan's IPA that access rights should be revoked promptly when a contract ends, as internal-misuse leaks remain a persistent security threat. The company is now reviewing all active accounts, including those of former staff and external collaborators.