Hiroshima Prefecture: its "International Peace Hub Hiroshima" website was tampered with and data taken, putting names, emails and passwords of 3,858 registrants at risk
The website was tampered with and data taken, and names, email addresses and passwords of 3,858 registrants are likely to have leaked.
Disclosed
2024-12-30
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
It found that the "International Peace Hub Hiroshima" website had been accessed without authorization, its content rewritten and data taken. It took the site down. Suspicious emails listing registrants' names and email addresses were sent to registrants. [1] [2]
It published the second report, saying names, email addresses and registered passwords of 3,858 individuals, companies and groups may have been taken. It consulted the prefectural police and is investigating the cause. [1] [2]
It published the third report, saying passwords had been encrypted at registration. [3]
Impact
The site opened in October 2019. Data on the site was also taken, and much of it may not be recoverable. There was no prospect of restoring the site (Asahi Shimbun, January 10). [1]
Timeline
- Detected, Disclosed 2024-12-30
- 1 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak][Site defacement][Service outage]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Major]Hiroshima, Hiroshima, NakaPrefecture3,858 leaked
Hiroshima Prefecture
Sources
- [1][News]広島県の平和発信サイトに不正アクセス 個人情報約3900件流出かThe Asahi Shimbun · 2025-01-10
- [2][News]「国際平和拠点ひろしま」ウェブサイトに不正アクセス、個人情報が漏えいした可能性 [2024.12.30]ScanNetSecurity · 2025-01-16 08:05
- [3][News]パスワードは登録時に暗号化 ~「国際平和拠点ひろしま」ウェブサイトに不正アクセスScanNetSecurity · 2025-01-22 08:05