> JapanHacked_
[Resolved][Severity: Moderate][Credential abuse]

Saitama University: a work PC with a weak password was logged into without authorization and files on a campus server were altered

On July 31 a PC with a weak password was logged into from outside and files on a campus server were altered. They held no personal or confidential data, and no leak was confirmed.

Disclosed

2021-10-22

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. A third party logged into a work PC from outside without authorization, accessed a campus server through it and altered files. [1]

  2. It announced the case. The PC that was logged into was removed and the password of the attacked server was changed. [1]

Impact

The PC and server affected held no personal or confidential data. Attempts to read information from the affected server to another campus server were recorded but denied, and no leak was confirmed. [1]

Timeline

  1. Started, Detected 2021-07-31
  2. Disclosed 2021-10-22
  3. 83 days

Attack or cause

Method
[Credential abuse]
Impact
Entry point
Remote access

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]本学のPC及び学内サーバーへの不正アクセスについてSaitama University · 2021-10-22