> JapanHacked_
[Investigating][Severity: Major][Web app exploit]

Chubu Centrair International Airport: its safety e-learning site for airport businesses was tampered with, possibly exposing 24,288 workers' records

The program code of the e-learning site for airport businesses was altered, and names and pass numbers of 24,288 registrants may have leaked.

Disclosed

2025-03-06

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. While investigating why part of the admin screen did not work, it found changes to the program that it did not recognize, and stopped using the site. [1]

  2. It sent a preliminary report to the Personal Information Protection Commission. [1]

  3. It announced the incident. [1]

Impact

The site is an education site for employees of businesses working in the restricted area. It held names, pass numbers, email addresses (5,163) and business phone numbers (4,715) of 24,288 pass registrants since December 2019. The tampering did not steal data or induce infection, but a leak could not be ruled out. The cause was unknown, and a flaw in the web server was suspected. [1] [2]

Timeline

  1. Detected 2025-02-26
  2. Disclosed 2025-03-06
  3. 8 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Name][E-mail address][Phone number]

Organizations involved

Open in organization search

Sources

  1. [1][News]中部国際空港の事業者向け安全 e ラーニングサイトに不正アクセスScanNetSecurity · 2025-03-31 08:05
  2. [2][News]空港「セントレア」従業員24,288件流出の可能性　サイト改ざん【中部国際空港】Cyber Security Research Institute · 2025-04-02