> JapanHacked_
[Contained][Severity: Major][Web app exploit]

Otsuka Toshimi Scholarship Foundation: unauthorized access to the scholars' page

At the end of July 2024 the foundation found unauthorised access to its website and shut the whole site down. The attack used a vulnerability in the software the site was built on, and traces of data being sent out were found. Names, gender, university at the time and contact details that scholars from fiscal 2013 or earlier entered on the members-only exchange page may have leaked. The page was closed. No count was published.

Disclosed

2024-09-26

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

Timeline

  1. Disclosed 2024-09-26
  2. 1 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Name][Gender][Education]

Organizations involved

Open in organization search

Sources

  1. [1][Official]不正アクセスによる、「奨学生専用ページ」における個人情報漏えいの可能性に関するお詫びとお知らせ（2013年度以前の奨学生で奨学生専用ページにログインしたことがある方へ）Otsuka Toshimi Scholarship Foundation · 2024-09-26
  2. [2][News]奨学生交流サイトに不正アクセス、個人情報が流出か - 大塚敏美育英奨学財団Security NEXT · 2024-10-08