> JapanHacked_
[Investigating][Severity: Major][Intrusion]

Japan Organ Transplant Network: its mail service was attacked from overseas and part of the mail data of the inquiry address was lost

From January 9 its mail service was attacked from overseas and part of the mail of the inquiry address was lost. No leak of personal data has been confirmed.

Disclosed

2023-01-20

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It confirmed security attacks from overseas on its mail service. The account of the address used for inquiries from outside was entered and part of the mail data was lost. [1]

  2. It announced the case. [1] [2]

  3. It published a follow-up. On January 16 it had found that data of specific email addresses had disappeared, and the provider it outsources the mail service to investigated and found that unauthorized access from outside had caused the loss. Up to 201 emails were lost. [3]

Impact

The data concerned is the mail of people who sent mail directly to the inquiry address from August 2020 to the end of December 2022. People who used the inquiry form on the website are not included. No leak of personal data has been confirmed, but some mails contain names and contact details, so it is analyzing the data in detail. [1]

Timeline

  1. Started, Detected 2023-01-09
  2. Disclosed 2023-01-20
  3. 11 days

Attack or cause

Method
[Intrusion]
Impact
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]当社団における不正アクセス事案の発生について|日本臓器移植ネットワークJapan Organ Transplant Network · 2023-01-20
  2. [2][News]日本臓器移植ネットワークのメールサービスへ攻撃、メールデータの一部消失ScanNetSecurity · 2023-01-25 08:05
  3. [3][News]日本臓器移植ネットワークのメールサービスへ攻撃、最大201件のメールデータが消失ScanNetSecurity · 2023-04-10 08:05