> JapanHacked_
[Contained][Severity: Major][Credential abuse]

Saitama University: one teacher's account on an external mail server was accessed without authorization, and 128 received emails and personal data of 67 people may have been viewed

On May 16 a suspicious overseas password authentication hit one teacher's mail account. 128 received emails may have been viewed.

Disclosed

2022-07-29

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. At 11:38 a.m. the external mail provider found a suspicious overseas password authentication on one teacher's account and changed the password. [1]

  2. The university announced the case. [1]

Impact

The 128 emails received from May 2 to 16 may have been viewed. They hold personal data of 67 people: 46 staff, 16 students and 5 outside parties. No misuse has been confirmed. [1]

Timeline

  1. Started 2022-05-02
  2. Detected 2022-05-16
  3. Disclosed 2022-07-29
  4. 88 days

Attack or cause

Method
[Credential abuse]
Impact
[Data leak]
Entry point
Stolen credentials

Data exposed or at risk

[Name][E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][Official]外部メールサーバへの不正アクセス及び情報漏えいの可能性についてSaitama University · 2022-07-29