Keio University: intrusion into the SFC email system
Suspicious traffic was detected and the entry route blocked on November 26. A zero-day in a Cisco quarantine server was suspected. The university assessed leakage as nearly certain for 6,447 directory entries with names and passwords and 1,025 graduate email-only entries, totaling 7,472. Up to 222,508 quarantined messages were also potentially exposed, though mass transfer was assessed as unlikely. Passwords were reset on December 23 and 25.
Disclosed
2025-12-26
Organizations involved
1
Leaked or at risk
222.5K
222,508
Downtime
Unknown
Timeline
- Detected 2025-11-26
- Disclosed 2025-12-26
- 30 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Critical]Tokyo, MinatoEducation and learning support222,508 leaked
Keio University
Sources
- [1][Official]不正アクセスによる個人情報漏洩の可能性についてのお知らせとお詫びKeio University · 2025-12-26