Okayama University Hospital: a doctor's personal cloud service ID and password were stolen by phishing, leaving a file with information on 269 patients open to the attacker

1. 2021-07-23

   The ID and password of a cloud service used personally by a doctor of Okayama University Hospital were stolen by phishing, and the doctor lost access to data tied to that ID. [1]

2. 2021-08-02

   It began mailing explanations and apologies to the patients concerned. [1]

3. 2021-08-04

   It announced the case. [1] [2]

The cloud held, against university rules, a file of patient information on a total of 269 people collected to check the course of treatment, and it was open to the attacker. No misuse was confirmed, and no unauthorized access to the university's core systems or electronic medical records was found. [1]