> JapanHacked_
[Resolved][Severity: Major][Intrusion]

The University of Tokyo: the HPCI primary center's user management server was accessed with administrator rights, and IDs and encrypted passwords may have leaked

From September 15 to October 5, a user management server was accessed with administrator rights, and about 400 IDs with encrypted passwords may have leaked.

Disclosed

2021-10-15

Organizations involved

1

Leaked or at risk

400

400

Downtime

Unknown

What happened

  1. From this day until October 5, the HPCI primary center's user management server (temporary) was accessed with administrator rights. [1] [2]

  2. It announced the case. The equipment was isolated and replaced by a secured server. [1] [2]

Information that may have leaked

About 400 HPCI IDs with encrypted passwords of users who designated the university as their primary center, 3 login IDs with encrypted passwords of the server administrators, and 63 IP addresses of users who accessed during the period. No personal data was stored and no secondary damage was confirmed. All users whose encrypted passwords may have leaked were asked to change them. [1]

Timeline

  1. Started 2021-09-15
  2. Detected 2021-10-05
  3. Disclosed 2021-10-15
  4. 30 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Passwords]

Organizations involved

Open in organization search

Sources

  1. [1][Official]東京大学管理のHPCI機材への不正アクセスについてInformation Technology Center, The University of Tokyo · 2021-10-15
  2. [2][News]東大管理のサーバに管理者権限で不正アクセス、IDと暗号化されたパスワード等流出の可能性ScanNetSecurity · 2021-10-20 08:05