> JapanHacked_
[Resolved][Severity: Moderate][Ransomware][Misconfiguration]

Saitama University: a settings flaw let outsiders reach its NAS devices, and ransomware altered part of the data

On June 7, 2022 a settings flaw let outsiders reach its NAS devices, passwords were cracked and six were hit by ransomware. No leak has been confirmed.

Disclosed

2023-02-09

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. At 8:00 a settings flaw made the NAS devices reachable from outside. Around noon the passwords of two NAS were cracked and four more were attacked. Ransomware altered part of the data. It noticed at 15:00 and cut them off. [1] [2]

  2. It announced the case. A third-party investigation (July to December 2022) found no leak. The data was restored. [1] [2]

Impact

Part of the data was altered and has been restored. The third-party investigation found no trace of a leak. [1] [2]

Timeline

  1. Started, Detected 2022-06-07
  2. Disclosed 2023-02-09
  3. 247 days

Attack or cause

Method
[Ransomware][Misconfiguration]
Impact
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]本学の情報システムへの不正アクセスについてSaitama University · 2023-02-09
  2. [2][News]埼玉大学のNAS4台にランサムウェア攻撃、データの一部が改変被害ScanNetSecurity · 2023-02-14 08:05