Gakken Medical Support: account permission error
On November 5 from 08:00 to 13:45, incorrect management-account settings exposed information from other facilities. Five accounts displayed up to 600 entries, of which 132 contained personal names and partial affiliation details. Logs showed no export or saving. Settings were fixed that day; passwords, email addresses and phone numbers were not viewed.
Disclosed
2025-11-11
Organizations involved
1
Leaked or at risk
600
600
Downtime
Unknown
Timeline
- Started, Detected 2025-11-05
- Disclosed 2025-11-11
- 6 days
Attack or cause
- Method
- [Misconfiguration]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Major]Tokyo, ShinagawaInformation and communications600 leaked
Gakken Medical Support Co., Ltd.
Sources
- [1][Official]一部の個人情報が一時的に閲覧可能な状態となっていたことについてのお詫びとご報告Gakken Medical Support Co., Ltd. · 2025-11-11