University of East Asia: data server intrusion
Following a December 11, 2024 report, investigation identified a December 7 intrusion exploiting a web-application vulnerability and site tampering. Information on 17,276 students and graduates was potentially exposed. The server was isolated and vulnerabilities fixed; no leakage or misuse had been confirmed as of February 14.
Disclosed
2025-03-13
Organizations involved
1
Leaked or at risk
17.3K
17,276
Downtime
Unknown
Timeline
- Started 2024-12-07
- Detected 2024-12-11
- Disclosed 2025-03-13
- 96 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak][Site defacement]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Critical]Yamaguchi, ShimonosekiEducation and learning support17,276 leaked
University of East Asia
Sources
- [1][Official]個人情報の流出の可能性に関するお知らせとお詫びUniversity of East Asia · 2025-03-13