Nagaoka University of Technology: a lecturer's mail account broken into and used to send 66,482 spam emails

A lecturer's mail account at Nagaoka University of Technology was taken over and sent 66,482 spam emails; stored mail may also have been read.

Disclosed

2020-02-07

Organizations involved

Leaked or at risk

Unknown

Downtime

Unknown

What happened

2019-10-17 19:25
The attacker got into the account and could read its mail, until 23:44 on 18 October. [1]
2019-10-17 21:08
The lecturer reported mass spam from their account, and the administrator changed the password. [1]
2020-02-07
Public disclosure. [1]

The account sent {n:66482} spam emails. Mail from 2 to 17 October, 675 internal and 464 external items, may have been read. [1]

Mail with personal data	Items
Staff names, units, personal phone numbers, email addresses	3
Student names, years, units, student numbers, email addresses (some with family names, addresses and phone numbers)	30
Outside people's names, affiliations, addresses, phone numbers, email addresses (some with CVs)	18