> JapanHacked_
[Contained][Severity: Major][Intrusion]

Hokkaido University: unauthorized access to the Faculty of Engineering web server, and 23,554 personal records may have leaked

The Faculty of Engineering web server was accessed without authorization in November 2023, and 23,554 records of students, staff and family members in its database may have leaked.

Disclosed

2024-03-01

Organizations involved

1

Leaked or at risk

23.6K

23,554

Downtime

Unknown

What happened

  1. A third party accessed the Faculty of Engineering web server without authorization. The access lasted until November 28. [1]

  2. It found that personal data in the database used only by engineering departments may have leaked. It cut off communication from outside the university and investigated, including through outside bodies. [1]

  3. It published the investigation results. It now runs a new web server separated from the database. It is notifying affected people by email as it confirms their contact details. [1] [2]

Impact

In total 23,554 records may have leaked: 19,570 students enrolled since fiscal 2003, 2,890 staff enrolled since fiscal 2004, 1,090 family members of staff enrolled since fiscal 2021, 1 part-time lecturer hired since October 2023 and 3 people who reserved seminar rooms and similar spaces since January 2023. No misuse has been confirmed. [1]

Timeline

  1. Started 2023-11-06
  2. Detected 2023-11-28
  3. Disclosed 2024-03-01
  4. 116 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]工学部ウェブサーバへの不正アクセスによる個人情報流出の可能性についてHokkaido University · 2024-03-01
  2. [2][News]北海道大学工学部ウェブサーバに不正アクセス、23,554件の個人情報が流出ScanNetSecurity · 2024-03-05 08:05