National Diet Library: development environment intrusion; suspected leak ruled out
Suspected leak ruled out: On November 5 an intrusion originating at subcontractor Solution One was identified in the development environment. Potentially exposed data included 40,373 print requests concerning 4,360 people and 943 user-ID-only entries. Access to the IIJ-managed development environment was blocked. Live library services and infrastructure were unaffected. The March 11, 2026 third report said an external specialist investigation established that no personal information leaked. Initial scopes such as the 40,373 records represent withdrawn exposure concerns, not confirmed leakage. The development environment was to be rebuilt with stronger safeguards.
Disclosed
2025-11-11
Organizations involved
2
Leaked or at risk
40.4K
40,373
Downtime
Unknown
Timeline
- Detected 2025-11-05
- Disclosed 2025-11-11
- 6 days
Attack or cause
- Method
- [Intrusion]
- Impact
- Entry point
- Supplier
Data exposed or at risk
Supply chain
- Organizations listed on this site
- 2
Organizations involved
[Through a supplier][Moderate]Tokyo, ChiyodaEducation and learning support
National Diet LibraryThe March 11, 2026 investigation ruled out personal data leakage. Initial suspected scopes, including 40,373 records, are retained as history. The intrusion itself was confirmed.
[Breached][Moderate]Tokyo, ChiyodaInformation and communications
Internet Initiative Japan Inc.
Sources
- [1][Official]開発中のシステムに対する不正アクセスの発生についてNDL · 2025-11-11
- [2][Official]開発中のシステムに対する不正アクセスの発生について(第2報)NDL · 2025-11-25
- [3][Official]開発中のシステムに対する不正アクセスの発生について(第3報)NDL · 2026-03-11