ECC: unauthorized access to the development server of its learning support system "Intersection" may have leaked data of 1,249 students
It confirmed unauthorized access on September 12. The server was accessed several times from May 16, and names and IDs of 1,249 students and some teaching material may have leaked.
Disclosed
2023-09-29
Organizations involved
2
Leaked or at risk
Unknown
Downtime
Unknown
What happened
From this day the development server was accessed without authorization several times. [1] [2]
Nagoya Jiyu Gakuin, which runs Nagoya University of the Arts, announced that personal data of 586 enrolled students using the ECC learning support system may have leaked. [3] [4]
Impact
Names, student IDs and part of the course information of 1,249 students, and some teaching material, may have leaked. [1] [2]
At Nagoya University of the Arts, the names, university name, student numbers, exam numbers, encrypted passwords and Eiken online practice records of 586 enrolled students may have leaked. No misuse has been confirmed. [3]
Timeline
- Started 2023-05-16
- Detected 2023-09-12
- Disclosed 2023-09-29
- 136 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Supply chain
Organizations involved
[Breached][Major]Osaka, Osaka, Kita-kuEducation and learning support1,249 leaked
ECC Co., Ltd.[Through a supplier][Major]Aichi, Nagoya, Showa-kuEducation and learning support586 leaked
Nagoya Jiyu Gakuin
Sources
- [1][Official]不正アクセスによる個人情報流出の可能性に関するお知らせとお詫びECC Co., Ltd. · 2023-09-29
- [2][News]生徒個人情報流出の可能性、ECC学習支援システム「インターセクション」開発サーバに不正アクセスScanNetSecurity · 2023-10-12 08:05
- [3][Official]学生の個人情報の漏洩の可能性に関するお詫びとお知らせNagoya Jiyu Gakuin (Nagoya University of the Arts) · 2023-11-29
- [4][News]ECC学習支援システムへの不正アクセス、名古屋芸術大学の在籍学生586人の個人情報漏えいの可能性ScanNetSecurity · 2023-12-06 08:05