> JapanHacked_
[Resolved][Severity: Major][Misconfiguration]

Hosei University: a faculty member saved personal data to a shared file server by mistake, making data of 1,683 people viewable by students and staff

A faculty member of the Faculty of Sociology saved files with personal data to a shared file server by mistake via a USB drive, making data of 1,683 people viewable.

Disclosed

2024-12-12

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. A faculty member of the Faculty of Sociology copied files containing personal data, which are not allowed to be carried, to a USB drive and saved them by mistake on the file server shared by students and staff on the Tama information education system. [1]

  2. The files were deleted from the file server. [1]

  3. It announced the case. It contacted current students individually to apologize and said it had received no report of secondary harm. [1] [2]

Impact

A total of 80 documents containing data of 1,683 people in all became viewable. Of these, 642 were graduates, including names, student ID numbers, faculty and department, grades, student details in submitted assignments and information in master's theses. [1]

Timeline

  1. Started 2024-10-19
  2. Disclosed 2024-12-12
  3. 54 days

Attack or cause

Method
[Misconfiguration]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Education]

Organizations involved

Open in organization search

Sources

  1. [1][Official]社会学部専任教員による個人情報の漏洩について（お詫び）Hosei University · 2024-12-12
  2. [2][News]個人情報を含むファイルをUSBメモリにコピーしファイルサーバに保存、延べ1,683名分が閲覧可能にScanNetSecurity · 2024-12-26 08:05