Muroran Institute of Technology: staff PCs were accessed without authorization, the mail server was used to send spam, and personal data of 553 people may have been viewed
From April to July 2022 four staff PCs were attacked and the mail server was used to send spam. Personal data of 553 people in past emails may have been viewed.
Disclosed
2023-02-27
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
It announced that from April to July 2022 PCs used by four staff members and others were accessed without authorization and the attacker used remote control to make the mail server send spam and similar. It found that the attacker may have viewed past sent and received emails of those staff on the mail server. [1] [2]
Impact
The emails that may have been viewed contained personal data of 553 people. No misuse of the personal data has been confirmed. For people whose data is only a name without contact details, or whose contact details are no longer valid, the posting on the website replaced individual notification. [1] [2]
Timeline
- Disclosed 2023-02-27
- 1 days
Attack or cause
- Method
- [Intrusion][Malware]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Major]Hokkaido, MuroranEducation and learning support553 leaked
Muroran Institute of Technology
Sources
- [1][Official]不正アクセスによる個人情報の漏えいの報告とお詫びについて | 国立大学法人 室蘭工業大学Muroran Institute of Technology · 2023-02-27
- [2][News]室蘭工業大学への不正アクセス、メールサーバにある教職員の送受信メールが閲覧された可能性ScanNetSecurity · 2023-03-03 08:05