Nichinoken: its web server was accessed without authorization and up to 280,106 email addresses may have leaked

1. 2022-01-11

   It noticed the unauthorized access, immediately tightened access control on all pages, identified the vulnerable spots and took countermeasures. [1]

2. 2022-01-29

   It announced the case and began notifying affected people by email. It notified the Personal Information Protection Commission and filed a damage report with the police. [1] [2]

In early December an SQL injection attack reached the web server, and up to 280,106 email addresses may have leaked. Names, addresses, phone numbers, birth dates, account details, grades and target school data are not included. [1] [2]