Osaka Kyoiku University: a teacher at its attached elementary school fell for smishing and their personal Apple ID was taken over, and the cloud held images showing pupils' personal data

A teacher at the attached elementary school fell for phishing by short message (SMS), so-called smishing, and a third party took over the account of Apple's cloud service the teacher subscribed to personally. [1]

Work photos taken with the smartphone, such as pupils, were synced to iCloud automatically. There were 73 images showing information on about 1,000 people in total, including names and addresses, and 3,349 photos including face photos and school life. There were also photos of the IDs and passwords of several teachers for the university's information system. [1]

The cloud also held 87 photos taken at the Osaka City elementary school where the teacher worked from 2014 to 2017, with personal information on up to 330 people. [1]