Nagoya University: researcher exchange site 100-nin RONBUN defaced; participant data may have leaked
On 27 September 2024 Nagoya University (Tokai National Higher Education and Research System) disclosed that its researcher exchange site '100-nin RONBUN' had been defaced. An outside report on 20 August revealed it, and a file containing malicious code had been created on the site. How the file was created is unknown. If someone had logged in to the admin screen, participants' names, email addresses, affiliations, job titles or school years, research introductions and comments may have leaked. The site has been cut off.
Disclosed
2024-09-27
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
Timeline
- Detected 2024-08-20
- Disclosed 2024-09-27
- 38 days
Attack or cause
- Method
- [Unknown]
- Impact
- [Site defacement][Data leak]
- Entry point
- Unknown
Data exposed or at risk
Services hit
Organizations involved
[Breached][Major]Aichi, Nagoya, ChikusaEducation and learning support
Nagoya University
Sources
- [1][Official]情報流出の可能性についてのお詫びとご報告Nagoya University · 2024-09-27
- [2][News]研究者交流サイト「東海国立大学機構100人論文」が改ざん被害Security NEXT · 2024-09-30