> JapanHacked_
[Investigating][Severity: Major][Web app exploit]

Hiroshima Prefecture: its "International Peace Hub Hiroshima" website was tampered with and data taken, putting names, emails and passwords of 3,858 registrants at risk

The website was tampered with and data taken, and names, email addresses and passwords of 3,858 registrants are likely to have leaked.

Disclosed

2024-12-30

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It found that the "International Peace Hub Hiroshima" website had been accessed without authorization, its content rewritten and data taken. It took the site down. Suspicious emails listing registrants' names and email addresses were sent to registrants. [1] [2]

  2. It published the second report, saying names, email addresses and registered passwords of 3,858 individuals, companies and groups may have been taken. It consulted the prefectural police and is investigating the cause. [1] [2]

  3. It published the third report, saying passwords had been encrypted at registration. [3]

Impact

The site opened in October 2019. Data on the site was also taken, and much of it may not be recoverable. There was no prospect of restoring the site (Asahi Shimbun, January 10). [1]

Timeline

  1. Detected, Disclosed 2024-12-30
  2. 1 days

Organizations involved

Open in organization search

Sources

  1. [1][News]広島県の平和発信サイトに不正アクセス 個人情報約3900件流出かThe Asahi Shimbun · 2025-01-10
  2. [2][News]「国際平和拠点ひろしま」ウェブサイトに不正アクセス、個人情報が漏えいした可能性 [2024.12.30]ScanNetSecurity · 2025-01-16 08:05
  3. [3][News]パスワードは登録時に暗号化 ~「国際平和拠点ひろしま」ウェブサイトに不正アクセスScanNetSecurity · 2025-01-22 08:05