Mie Prefectural General Medical Center: its website was written to without authorization and external link URLs appeared on six pages
The website was accessed without authorization on the night of May 5 and external link URLs were written into six pages. No effect on care or personal data.
Disclosed
2023-05-11
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
At about 21:30 an update history was recorded on the website, although neither staff nor the maintenance contractor had made updates. [1] [2]
A staff member editing the website found the unauthorized writing (external link URLs) and judged it a third-party intrusion. All pages were checked and the six pages with writing were corrected. It reported to the Mie prefectural police and announced the case. [1] [2]
Impact
Medical information systems such as electronic medical records are separated from the internet, so there is no effect on care. Apart from the unauthorized writing, no leak of personal data has been confirmed. It continues the cause investigation and strengthens security measures and monitoring. [1] [2]
Timeline
- Started 2023-05-05
- Detected, Disclosed 2023-05-11
- 6 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Site defacement]
- Entry point
- Unknown
Data exposed or at risk
–
Organizations involved
[Breached][Moderate]Mie, YokkaichiMedical care and welfare
Mie Prefectural General Medical Center
Sources
- [1][Official]ホームページへの不正アクセスによる書き込みについて|お知らせ一覧|三重県立総合医療センター(四日市市)Mie Prefectural General Medical Center · 2023-05-11
- [2][News]三重県立総合医療センターのホームページに不正な書き込み、診療への影響なしScanNetSecurity · 2023-05-19 08:05