> JapanHacked_
[Resolved][Severity: Moderate][Intrusion]

KKR: unauthorized access to the Toranomon Hospital website made it and the sites of related clinics unreachable

Unauthorized access on November 11 took down the sites of Toranomon Hospital, its branch and two clinics. Medical records run separately and were not affected.

Disclosed

2020-11-13

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. The Toranomon Hospital website was accessed without authorization by a third party. [2]

  2. The federation announced that the site could not be viewed. [2]

Impact

Besides Toranomon Hospital, the sites of its branch hospital, its Saitama clinic and its clinic in the Yokohama No. 2 government building could not be viewed. The electronic medical record system runs on a separate network, and the federation said patient data was not affected. [1] [2]

Timeline

  1. Detected 2020-11-11
  2. Disclosed 2020-11-13
  3. 2 days

Attack or cause

Method
[Intrusion]
Impact
[Service outage]
Entry point
Web app

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]不正アクセスで虎の門病院サイトが閲覧不能に - 電子カルテに影響なしSecurity NEXT · 2020-11-17
  2. [2][News]国家公務員共済組合連合会運営の「虎の門病院」Webサイトに不正アクセス、閲覧不能にScanNetSecurity · 2020-11-20 08:00