Japan’s Digital Agency: up to 13,000 contact-form messages possibly leaked after a contractor was hacked
Checked on
Published on
On the evening of 22 October, the Digital Agency announced that up to more than 13,000 items entered in its website’s contact forms may have leaked. What we know.

In this article
The essentials
On the evening of 22 October, the Digital Agency announced that up to more than 13,000 items entered in the contact forms of its website may have leaked. Entries from May 2021 to March 2023 are concerned.
What information?
The data possibly affected are names, email addresses and the contents of messages entered in the forms. According to the breakdown given, there are up to 8,833 “general opinions and requests” and up to 3,661 requests related to the application of the vaccination certificate; with the other forms, more than 13,000 in total.
What cause?
The Agency used, for part of its site management, a service from the company Studio, which provides a website-building tool. Studio announced this month that it had suffered unauthorised access, and a link with this affair is indicated. According to the Agency’s announcement, this is at the stage of a “possible” leak; neither the results of the investigation nor preventive measures have been reported.
If you wrote to the Agency
The Agency urges people to beware of suspicious emails. If you wrote through its forms between 2021 and 2023, be particularly careful with unknown emails or calls. Do not open links that ask you to enter personal information.
Not to be confused
The media on the same day also report that the Ministry of Health temporarily suspended 31 systems because of a vulnerability in the PHP language, with no confirmed leak. This is a separate event from the Digital Agency’s.
To keep in mind
This is not a confirmed leak but an announcement of a “possibility”. The figures are maximums and may change with the investigation. Check the Digital Agency’s most recent official announcements.
Learn the grammar
French grammar
Learn sentence patterns and usage from the article’s own sentences.
01The present indicative
est / sont + attribute (noun, adjective, prepositional phrase)
Les données possiblement touchées sont les noms, adresses e-mail et contenus des messages saisis dans les formulaires.Key pointsÊtre in the present is est for a singular subject and sont for a plural one. It describes nature, state or place (“is”, “is located”). If what follows (the attribute) is a noun, adjective or prepositional phrase, it is not a passive. If a past participle follows, it is a passive (est annoncé). Headlines and summaries often use the present to describe the current situation.
02The passé composé
present of avoir + past participle
Le soir du 22 octobre, l’Agence du numérique a annoncé que jusqu’à plus de 13 000 contenus saisis dans les formulaires de contact de son site pourraient avoir fuité.Key pointsThe passé composé is the most common past tense, used for “did” and “has done” — actions completed in the past. It is formed with the auxiliary avoir (a / ont…) in the present + a past participle. Past participles of -er verbs end in -é (annoncer → annoncé); learn the irregular ones (faire → fait, prendre → pris, voir → vu). In the negative, ne … pas wraps the auxiliary (n’a pas annoncé). In the news it reports facts that have already happened, such as “announced” or “voted”.
03The imparfait
stem (nous form of the present) + -ais / -ait / -ions / -iez / -aient
L’Agence utilisait, pour une partie de la gestion de son site, un service de la société Studio, qui fournit un outil de création de sites.Key pointsThe imparfait describes states, background, habits and actions in progress in the past (il était, elle avait, ils pensaient). Take the nous form of the present, drop -ons, and add -ais / -ais / -ait / -ions / -iez / -aient. If the passé composé gives “the event itself”, the imparfait paints “the situation at the time”.
04The present conditional
stem (infinitive) + -ais / -ait / -ions / -iez / -aient
Le soir du 22 octobre, l’Agence du numérique (Digital Agency) a annoncé que jusqu’à plus de 13 000 contenus saisis dans les formulaires de contact de son site pourraient avoir fuité.Key pointsThe conditional expresses possibility, supposition, unconfirmed information and polite requests (“would”, “might”). It uses the same stem as the future and the same endings as the imparfait (-ais, -ait, -ions, -iez, -aient): pouvoir → il pourrait. In the news it is used to avoid asserting, as in “is reported to…” or “there is a possibility…”.
05The passive voice in the present
être (est / sont) + past participle (+ par / de)
Studio a annoncé ce mois-ci avoir subi un accès non autorisé, et un lien avec cette affaire est indiqué.Key pointsThe passive means “is done” or “is being done”. It is formed with être + past participle, which agrees with the subject in gender and number (la mesure est adoptée / les mesures sont adoptées). The agent is introduced by par (or de). In the news it is common when the event, rather than the actor, is the focus (est prévu / est annoncé / est connu).
06The passive in the passé composé
a / ont été + past participle
Selon l’annonce de l’Agence, on en est au stade d’une fuite « possible » ; ni les résultats de l’enquête ni les mesures de prévention n’ont été rapportés.Key pointsThe past passive means “was done”. Its form is present of avoir + été (past participle of être) + past participle. Été does not change, but the last participle agrees with the subject in gender and number (la loi a été votée / les textes ont été votés). It is frequent in news reporting results such as votes, decisions and announcements.
07The imperative
present vous form (-ez) / nous (-ons) / tu
Consultez les annonces officielles les plus récentes de l’Agence du numérique.Key pointsThe imperative expresses commands, requests and advice. It has no subject: the sentence starts with the verb (Consultez les informations.). The vous form ends in -ez, nous in -ons (Restons prudents.), and tu in -e for -er verbs (Consulte). It is very common in notices and warnings (Vérifiez, Consultez, Restez informé).
08Pronominal verbs
se / s’ + verb
Il ne s’agit pas d’une fuite confirmée mais d’une annonce de « possibilité ».Key pointsA pronominal verb is used with a reflexive pronoun (me, te, se, nous, vous) before the verb. It can mean “do to oneself”, “be done” or “do to each other”. In the news, se traduire (to result in), se tenir (to take place), s’agir de (to be a matter of) and se diffuser (to spread) are frequent. The pronoun changes with the subject (il se tient / ils se tiennent / je me souviens).
09Negation and its scope
ne / n’ … pas · ne … plus
Selon l’annonce de l’Agence, on en est au stade d’une fuite « possible » ; ni les résultats de l’enquête ni les mesures de prévention n’ont été rapportés.Key pointsNormally ne and pas wrap the verb. Before a vowel, ne becomes n’. Check which part of the sentence the negation covers. Ne … plus means “no longer”.
10Citing a source with selon
selon + noun / organisation
Selon la répartition donnée, il y a jusqu’à 8 833 « opinions et demandes générales » et jusqu’à 3 661 demandes liées à l’application du certificat de vaccination ; avec les autres formulaires, plus de 13 000 au total.Key pointsSelon means “according to”. Put a person or organisation after it as the source. It separates facts the writer checked directly from what another body or report said. Citing a source does not turn a forecast into an accomplished fact.
11Pouvoir: ability and possibility
peut / peuvent / pourrait + infinitive
Le soir du 22 octobre, l’Agence du numérique a annoncé que jusqu’à plus de 13 000 contenus saisis dans les formulaires de contact de son site pourraient avoir fuité.Key pointsPut a base-form verb after pouvoir. Peut means “can” or “may”; the conditional pourrait gives a more reserved possibility, “might”. It does not necessarily mean implementation is settled.
12Purpose with pour
pour + infinitive
Un « formulaire de contact » est l’écran de saisie d’un site pour envoyer une question ou un avis.Key pointsThis is the purpose, “in order to…”. Put the base form of a verb after pour. The purpose stated here is separate from whether the effect was actually achieved.
13The construction il s’agit de
il s’agit de + noun / infinitive
Il ne s’agit pas d’une fuite confirmée mais d’une annonce de « possibilité ».Key pointsIt explains what something is about: “it is a matter of…”. The il is not a particular man but a formal subject of this construction. The negative il ne s’agit pas de means “this is not about…”.
Japanese grammar
Understand the structure and usage from the text.
01Defining a term with とは
noun + とは
これは、デジタル庁の件とは、別の出来事です。Key pointsIt takes up a word, as in “在留資格とは?”, and asks for its meaning. In explanations it is used as “〜とは、…です”. Here the quotation と and the topic は are combined.
02Expressing a possibility
〜可能性がある / 〜かもしれない
デジタル庁は22日夜、ホームページの問い合わせフォームに入力された内容が、最大1万3000件あまり、外部に流出した可能性があると発表しました。Key pointsThese forms say something may happen. Even when “possibility” is written, it does not mean it will certainly happen. Check whose forecast it is, plus the time and conditions.
03Qualifying a noun with に関する
noun + に関する + noun
件数の内訳は、「一般的なご意見・ご要望」が最大8833件、「接種証明書アプリに関する問い合わせ」が最大3661件で、ほかのフォームを合わせて、1万3000件以上です。Key pointsAs in “税控除に関する採決”, it explains what the following noun relates to. It is close to “about” and is common in headlines and descriptions.
04Giving examples with など
noun / expression + など
流出した可能性があるのは、フォームに入力された、氏名、メールアドレス、問い合わせの内容などです。Key points“暴言など” gives “abusive language” as one example. It is not necessarily a closed list of only the things named. It also helps when reading the scope of a news story.
05The polite past ました
verb stem (連用形) + ました
デジタル庁は、22日の夜、ホームページの問い合わせフォームに入力された内容が、最大1万3000件あまり、外部に流出した可能性があると発表しました。Key pointsIn “発表しました”, ました makes a verb polite past. The negative is “ませんでした”. Read the actual date together with the date and time in the text.
06Quoting with と: content and report
plain-form sentence + と + verbe de parole (報じる, 説明する…)
情報漏えいは確認されていないと報じられています。Key pointsと takes the content that is reported or explained. In “改定する方針だと報じました”, “改定する方針だ” is what the report said. Separating the content from who said it and how makes long sentences easier to read.