Nagoya University: three mail accounts of university hospital staff were accessed without authorization by brute force

1. 2022-02-24

   After a report that spam mail spoofing the address of hospital staff had been sent, it investigated and announced that it had confirmed suspicious access to three accounts from foreign IP addresses. [1]

The suspicious access ran from March to the end of September 2021. The mail server then held mail with attached files listing diagnoses and procedures of 184 patients, names and student numbers of 140 students, test results of 44 students in club activities, contact details of 34 joint researchers and clinical trial staff, and names of 14 hospital staff. The cause was password cracking by brute force. No misuse has been confirmed. [1]