> JapanHacked_
[Investigating][Severity: Major][Intrusion]

QST: a zero-day attack on its remote access device may have exposed registered names and email addresses

A zero-day attack hit the remote access device used for telework, and registered names, email addresses and affiliations may have been exposed.

Disclosed

2025-03-07

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It confirmed that the remote access device it used was covered by vulnerability information from an outside security body, and shut it down in an emergency at about 17:30 the same day. [1]

  2. An investigation confirmed traces of unauthorized access by a zero-day attack in late December 2024. [1]

  3. It announced the incident. It had found no trace of data being taken or any misuse, but could not rule out a leak. [1] [2]

Impact

The device held email addresses, names and affiliations registered for telework and remote access. It said it was continuing the investigation with an outside contractor. [1]

Timeline

  1. Detected 2025-01-09
  2. Disclosed 2025-03-07
  3. 57 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
VPN device

Data exposed or at risk

[Name][E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][Official]リモートアクセス機器に対する不正アクセスに関するご報告National Institutes for Quantum Science and Technology · 2025-03-07
  2. [2][News]外部セキュリティ機関からの脆弱性情報がきっかけで発覚 ～ 国立研究開発法人量子科学技術研究開発機構のリモートアクセス機器にゼロデイ攻撃ScanNetSecurity · 2025-03-17 08:05