Asahi University: four teachers' email accounts were accessed without authorization and mail containing personal data was viewed

1. 2022-01-08

   Foreign IP addresses accessed the teachers' email accounts through webmail. Mail was viewed and spoofed mail was sent from the accounts. The teacher's account was frozen to stop further viewing. [1] [2]

2. 2022-03-02

   It announced the case. [1] [2]

The cause was a teacher who received suspicious mail posing as an account update and entered account information on a phishing site. The leaked mail contained names and email addresses of students and staff and personal data of people outside the university. No misuse has been confirmed. It introduced multi-factor authentication on the mail server. [1]