Kyoto University: a configuration mistake in the authentication system for staff and students left the names, mail addresses, IDs and hashed passwords of 40,751 people viewable from outside

1. 2021-01-04

   A staff member noticed a fault in the course of work. [1]

A setting was wrong when the authentication system used by staff and students was revised in early June 2020. As a result, from then until January 4, 2021, the names, mail addresses, IDs and hashed passwords of 40,751 people (27,861 students and 12,890 staff) could be viewed from outside. [1]

The university fixed the setting and is having the people concerned change their passwords. It said it found no sign that the exposed information was accessed from outside. [1]