The massive leak last month of personal data from the Japan Pension Service was the result of a simple error by its employees: opening a virus-laced email attachment disguised as a health ministry document.