Nagoya University: a teacher at its university hospital had a password stolen by phishing, and data on 333 students and 2 teachers in the mail account may have been viewed

1. 2021-03-03

   From this day the mail account was accessed without authorization. [1]

2. 2021-03-05

   The university noticed a large volume of email going outside and began an investigation. [1]

The teacher apparently entered an ID and password at a URL in a phishing email that claimed to come from a real unit, the IT Help Desk of the Information Technology Headquarters. The account was used to receive work messages and held 3,994 emails, which may have been viewed from outside. [1]

Of these, 857 were notifications of assignment submissions, containing names, assignment titles and student numbers of 333 students and names and staff numbers of 2 teachers. The university explained and apologized by email to the students and teachers concerned. [1]