> JapanHacked_
[Resolved][Severity: Major][Web app exploit]

Hosei University: an attack on its contractor Nippon Steel Solutions may have leaked the names and email addresses of 16,542 students and staff

An attack on its network management contractor Nippon Steel Solutions may have leaked the names, email addresses and other data of 16,542 students and staff.

Disclosed

2025-08-06

Organizations involved

2

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. Nippon Steel Solutions detected suspicious access to an internal server and isolated the server from the network. [1] [2]

  2. Nippon Steel Solutions gave Hosei University its final investigation report. [2]

  3. Hosei University announced that personal data may have leaked. [1] [2] [3]

Impact

The 16,542 people are 8,363 students admitted from fiscal 2000 to 2022, 7,438 staff on the rolls from fiscal 2018 to 2022 and 741 unclassified people. Their names, email addresses, phone numbers, affiliations and integrated authentication IDs may have leaked. No highly sensitive data was included. It notified 2,892 people by email and informed the other 13,650, who could not be reached, by a notice on its website. No leak on the dark web or elsewhere has been found. [1] [2]

Nikkei xTECH reported that Nippon Steel Solutions had announced in July 2025 that a zero-day attack in March may have leaked data on its partners and others. [1]

Timeline

  1. Started, Detected 2025-03-07
  2. Disclosed 2025-08-06
  3. 152 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak]
Entry point
Supplier

Data exposed or at risk

[Name][E-mail address][Phone number]

Supply chain

Organizations listed on this site
2

Organizations involved

Open in organization search

Sources

  1. [1][News]法政大で個人情報漏洩の恐れ、学生など1万6500人超 委託先のNSSOLが不正アクセスNikkei xTECH · 2025-08-07
  2. [2][News]法政大、個人情報1万6542人分流出の可能性 委託先・日鉄ソリューションズへの不正アクセスでITmedia NEWS · 2025-08-08
  3. [3][News]日鉄ソリューションズへの不正アクセス、法政大学の学生等 16,542 名の個人情報が漏えいした可能性ScanNetSecurity · 2025-08-21 08:05