TOKYO — A social media trend built around being spontaneous is forcing Japanese companies to take a harder look at digital privacy.
BeReal, the photo-sharing app that asks users to capture and post simultaneous front- and rear-camera images within a random two-minute window, has become hugely popular among Japan’s younger generation. But the app’s demand for instant, unfiltered posts has also created an unexpected workplace security problem: employees can accidentally photograph sensitive information before realizing what is visible in the background.
As of June 2026, BeReal had more than 6.5 million monthly active users in Japan, with about 92% between ages 13 and 27, according to figures cited by The Straits Times. That represents a significant increase from roughly five million users a year earlier.
The issue came into sharper focus after Japanese public broadcaster NHK identified at least 40 institutional data-leak cases over a 45-day period from April to May that were traced to the app.
How a Two-Minute Photo Became a Workplace Security Risk
BeReal’s appeal comes from its rejection of the highly polished image culture associated with traditional social media. Users receive a notification at a different time each day and have two minutes to take a picture using their front and rear cameras.
There are no filters or conventional camera-roll uploads, making the experience deliberately spontaneous.
But that spontaneity can become a liability inside offices, schools, banks and other institutions.
A photograph that appears harmless can inadvertently capture computer screens, whiteboards, documents, customer information or other sensitive material in the background. Once posted, an image intended for friends can also be screenshotted and redistributed beyond its original audience.
One of the most prominent cases involved Nishi-Nippon City Bank in Fukuoka.
An employee reportedly posted a BeReal image taken inside a branch. The photograph subsequently appeared on X and accumulated more than 10 million views overnight.
Visible in the background were sensitive details involving private banking clients, corporate accounts and internal sales targets. The incident led to a public apology from the bank’s president, while Japan’s Financial Services Agency launched an inquiry. The parent company’s shares also fell by nearly 3% following the incident, according to The Straits Times.
The Problem Goes Beyond Banks
Similar incidents have reportedly surfaced in schools, restaurants, manufacturing companies and healthcare facilities.
In Sendai, a teacher unintentionally photographed a computer monitor displaying an internal school-management system.
In Tokyo, a part-time restaurant worker reportedly uploaded an image containing customer information, while another incident involved an employee photographing an applicant’s resume.
A machinery manufacturer in Ishikawa was reported to have exposed internal pricing information, while a hospital in Hokkaido inadvertently revealed patient names and ages.
The incidents illustrate a broader digital-privacy problem: people may think they are sharing only themselves, while their cameras are also capturing everything around them.
Japan’s Companies Are Tightening the Rules
The fallout has pushed companies to reconsider how employees use personal smartphones and social media at work.
Some businesses are strengthening workplace restrictions, including bans on personal smartphone use during working hours and requiring employees to store devices away from their desks.
Nishi-Nippon City Bank, for example, already had a policy prohibiting personal smartphone use in its offices, but acknowledged that the rule had not been consistently enforced before the incident.
The incidents have therefore become more than a debate about one social media app. They are prompting Japanese employers to revisit a larger question: how prepared are workplaces for a generation accustomed to documenting everyday life instantly?
The Bigger Digital-Privacy Lesson
BeReal did not set out to become a corporate-security issue. Its popularity in Japan has largely been driven by its promise of authenticity and its appeal to young users tired of carefully curated social-media personas.
But the Japanese experience highlights an increasingly important reality of the digital age: a post intended for a small circle of friends can escape that circle almost instantly.
For companies, the challenge is not simply banning one application. It is teaching employees to recognize what a camera can capture, understanding that “friends-only” does not guarantee permanent privacy, and updating workplace policies as new platforms emerge.
Japan’s BeReal incidents are consequently becoming a broader lesson in digital literacy — because sometimes the biggest privacy risk in a photograph is not the person taking it, but everything happening behind them.
WWC ONE MEDIA G,A
