> JapanHacked_
[Contained][Severity: Major][Misconfiguration]

Gakken Medical Support: account permission error

On November 5 from 08:00 to 13:45, incorrect management-account settings exposed information from other facilities. Five accounts displayed up to 600 entries, of which 132 contained personal names and partial affiliation details. Logs showed no export or saving. Settings were fixed that day; passwords, email addresses and phone numbers were not viewed.

Disclosed

2025-11-11

Organizations involved

1

Leaked or at risk

600

600

Downtime

Unknown

Timeline

  1. Started, Detected 2025-11-05
  2. Disclosed 2025-11-11
  3. 6 days

Attack or cause

Method
[Misconfiguration]
Impact
[Data leak]
Entry point
Web app

Data exposed or at risk

[Name][Employment]

Organizations involved

Open in organization search

Sources

  1. [1][Official]一部の個人情報が一時的に閲覧可能な状態となっていたことについてのお詫びとご報告Gakken Medical Support Co., Ltd. · 2025-11-11