> JapanHacked_
[Resolved][Severity: Major][Misdelivery]

Sophia University: a file with data on all 13,949 regular students was emailed by mistake to three overseas partner schools

A study abroad participant list was sent to three partner school contacts with the sheet of all 13,949 regular students, with names, birth dates and nationalities, still attached.

Disclosed

2024-06-26

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. The Center for Global Education sent the participant list of a short-term program to contacts at three overseas partner schools without deleting the master data sheet that held information on all regular students. [1]

  2. While preparing a participant list for another program, the center found a file with the master data still in it and realized the mistake. It asked the recipients to delete the data and confirmed deletion. [1]

  3. It announced the case, saying it had no reports of harm. [1] [2]

Impact

The data of 13,949 people included student numbers, faculties and departments, years, names, birth dates and nationalities. The recipients were three contacts at three overseas partner schools. All students were told by email with an apology and explanation. [1]

Timeline

  1. Started 2024-05-16
  2. Detected 2024-06-07
  3. Disclosed 2024-06-26
  4. 41 days

Attack or cause

Method
[Misdelivery]
Impact
[Data leak]
Entry point
E-mail

Data exposed or at risk

[Name][Date of birth][Education]

Organizations involved

Open in organization search

Sources

  1. [1][Official]メールの誤送信による個人情報の流出についてSophia University · 2024-06-26
  2. [2][News]上智大学でシートの削除漏れ、全正規生 13,949 名の個人情報を海外協定校に誤送信ScanNetSecurity · 2024-07-10 08:05