Sophia University: a file with data on all 13,949 regular students was emailed by mistake to three overseas partner schools
A study abroad participant list was sent to three partner school contacts with the sheet of all 13,949 regular students, with names, birth dates and nationalities, still attached.
Disclosed
2024-06-26
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
The Center for Global Education sent the participant list of a short-term program to contacts at three overseas partner schools without deleting the master data sheet that held information on all regular students. [1]
While preparing a participant list for another program, the center found a file with the master data still in it and realized the mistake. It asked the recipients to delete the data and confirmed deletion. [1]
It announced the case, saying it had no reports of harm. [1] [2]
Impact
The data of 13,949 people included student numbers, faculties and departments, years, names, birth dates and nationalities. The recipients were three contacts at three overseas partner schools. All students were told by email with an apology and explanation. [1]
Timeline
- Started 2024-05-16
- Detected 2024-06-07
- Disclosed 2024-06-26
- 41 days
Attack or cause
- Method
- [Misdelivery]
- Impact
- [Data leak]
- Entry point
Data exposed or at risk
Organizations involved
[Breached][Major]Tokyo, ChiyodaEducation and learning support13,949 leaked
Sophia School Corporation
Sources
- [1][Official]メールの誤送信による個人情報の流出についてSophia University · 2024-06-26
- [2][News]上智大学でシートの削除漏れ、全正規生 13,949 名の個人情報を海外協定校に誤送信ScanNetSecurity · 2024-07-10 08:05