Tokai National Higher Education and Research System: its account management server was hit by a password brute-force attack and ransomware, and about 40,000 personal records may have leaked

1. 2022-10-18

   It checked the logs of the account management server and found a password brute-force attack. It cut the network at once. [1]

2. 2022-11-18

   It announced the case. The server had also been infected with ransomware and part of the data was altered. [1]

Personal data on the server, including institution accounts and names, about 40,000 records, may have leaked. No misuse has been confirmed. The altered data can be restored and there was no direct effect on university operations. The cause was a configuration flaw in a place where network access from outside the system should be restricted. The people concerned were told the facts and asked to change their passwords. [1]