Hiroike Gakuen: ransomware after an intrusion in March; student and parent data at risk
On 30 August 2024 Hiroike Gakuen (Kashiwa, Chiba), which runs Reitaku Kindergarten, Reitaku Junior and Senior High School and Reitaku University, said its information systems had been hit by ransomware on 27 August. According to its investigation report of 14 March 2025, the attacker broke into its servers on 20 March 2024, and several suspicious connections in August left traces of a possible leak. Ransomware was run early on 27 August, encrypting files on servers and PCs and making the systems unusable. Names, birth dates, addresses, phone numbers, email addresses, enrolment records and more of current and former pupils and students, their parents, staff, former staff and business partners may have leaked. No publication on the dark web or misuse has been found.
Disclosed
2024-08-30
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
Timeline
- Started 2024-03-20
- Detected 2024-08-27
- Disclosed 2024-08-30
- 163 days
Attack or cause
- Method
- [Ransomware]
- Impact
- [Service outage][Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Critical]Chiba, KashiwaEducation and learning support
Hiroike Gakuen
Sources
- [1][Official]本学園の情報システムに対するランサムウェア攻撃発生についてHiroike Gakuen · 2024-08-30
- [2][Official]本学園の情報システムに対するランサムウェア攻撃による被害報告についてHiroike Gakuen · 2025-03-14