Hosei University: an attack on its contractor Nippon Steel Solutions may have leaked the names and email addresses of 16,542 students and staff
An attack on its network management contractor Nippon Steel Solutions may have leaked the names, email addresses and other data of 16,542 students and staff.
Disclosed
2025-08-06
Organizations involved
2
Leaked or at risk
Unknown
Downtime
Unknown
What happened
Nippon Steel Solutions detected suspicious access to an internal server and isolated the server from the network. [1] [2]
Nippon Steel Solutions gave Hosei University its final investigation report. [2]
Hosei University announced that personal data may have leaked. [1] [2] [3]
Impact
The 16,542 people are 8,363 students admitted from fiscal 2000 to 2022, 7,438 staff on the rolls from fiscal 2018 to 2022 and 741 unclassified people. Their names, email addresses, phone numbers, affiliations and integrated authentication IDs may have leaked. No highly sensitive data was included. It notified 2,892 people by email and informed the other 13,650, who could not be reached, by a notice on its website. No leak on the dark web or elsewhere has been found. [1] [2]
Nikkei xTECH reported that Nippon Steel Solutions had announced in July 2025 that a zero-day attack in March may have leaked data on its partners and others. [1]
Timeline
- Started, Detected 2025-03-07
- Disclosed 2025-08-06
- 152 days
Attack or cause
- Method
- [Web app exploit]
- Impact
- [Data leak]
- Entry point
- Supplier
Data exposed or at risk
Supply chain
[Breached]
[Breached]
- Organizations listed on this site
- 2
Organizations involved
[Breached][Major]Tokyo, MinatoInformation and communications
NS Solutions Corporation[Through a supplier][Major]Tokyo, ChiyodaEducation and learning support16,542 leaked
Hosei University
Sources
- [1][News]法政大で個人情報漏洩の恐れ、学生など1万6500人超 委託先のNSSOLが不正アクセスNikkei xTECH · 2025-08-07
- [2][News]法政大、個人情報1万6542人分流出の可能性 委託先・日鉄ソリューションズへの不正アクセスでITmedia NEWS · 2025-08-08
- [3][News]日鉄ソリューションズへの不正アクセス、法政大学の学生等 16,542 名の個人情報が漏えいした可能性ScanNetSecurity · 2025-08-21 08:05