JAIST: a misused security terminal sent files to a virus-scanning service, leaving data of 1,725 faculty members and students visible to outsiders

1. 2020-11-20

   A staff member mistakenly used a terminal with a function that sends downloaded files to an outside virus-scanning site and downloaded a document with data of faculty members and students. The file was uploaded to the site automatically. [1] [2]

2. 2021-01-15

   After an outside report, the university noticed that the data was visible. [1] [2]

3. 2021-01-16

   It deleted the uploaded files. [1]

4. 2021-01-29

   The university disclosed the case. [1] [2]

The data covered 1,725 faculty members and students: names, university mail addresses and affiliations, but no birth dates or addresses. Contract holders of the service could view the files until they were deleted. [1] [2]

A Nikkei xTECH column explained that the terminal had a function turned on that sent files to a virus-scanning site automatically when they were opened. [3]