Hokkaido University: unauthorized access to the Faculty of Engineering web server, and 23,554 personal records may have leaked
The Faculty of Engineering web server was accessed without authorization in November 2023, and 23,554 records of students, staff and family members in its database may have leaked.
Disclosed
2024-03-01
Organizations involved
1
Leaked or at risk
23.6K
23,554
Downtime
Unknown
What happened
A third party accessed the Faculty of Engineering web server without authorization. The access lasted until November 28. [1]
It found that personal data in the database used only by engineering departments may have leaked. It cut off communication from outside the university and investigated, including through outside bodies. [1]
It published the investigation results. It now runs a new web server separated from the database. It is notifying affected people by email as it confirms their contact details. [1] [2]
Impact
In total 23,554 records may have leaked: 19,570 students enrolled since fiscal 2003, 2,890 staff enrolled since fiscal 2004, 1,090 family members of staff enrolled since fiscal 2021, 1 part-time lecturer hired since October 2023 and 3 people who reserved seminar rooms and similar spaces since January 2023. No misuse has been confirmed. [1]
Timeline
- Started 2023-11-06
- Detected 2023-11-28
- Disclosed 2024-03-01
- 116 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
–
Organizations involved
[Breached][Major]Hokkaido, Sapporo, Kita-kuEducation and learning support23,554 leaked
Hokkaido University
Sources
- [1][Official]工学部ウェブサーバへの不正アクセスによる個人情報流出の可能性についてHokkaido University · 2024-03-01
- [2][News]北海道大学工学部ウェブサーバに不正アクセス、23,554件の個人情報が流出ScanNetSecurity · 2024-03-05 08:05