Shibaura Institute of Technology: a teacher's VPN account was abused from abroad to probe its authentication server, and student and staff names and email addresses may have leaked

1. 2025-07-04

   Unauthorized access to the VPN with a teacher's account, plus suspicious user searches and attacks on the authentication server, began from foreign IP addresses (also on the 5th, 7th, 11th and 14th). [1] [2]

2. 2025-07-29

   A staff member found a record of suspicious user searches, investigated and confirmed traces of the unauthorized access. The same day the teacher account password was changed. [1] [2]

3. 2025-07-31

   It reported to the Ministry of Education, the Personal Information Protection Commission, JPCERT/CC and the Metropolitan Police. [1]

4. 2025-08-12

   It began notifying people who may have been affected by individual emails. [1]

5. 2025-08-22

   It announced the incident. [1] [3]

Current students (undergraduate and graduate), graduates mostly enrolled from fiscal 2019 to 2021, and current and former staff are covered. User IDs, names and university email addresses may have leaked. No count was published. There is no record of a successful attack on the authentication server, no seizure of administrator rights and no ransomware, and no concrete sign of a leak or secondary harm has been found. [1] [2]