JAEA: unauthorized access to the JRR-3 research reactor support site
On 25 September, the Japan Atomic Energy Agency found that 2,419 files had been downloaded without authorization from JRR-3 RING, the support site for outside users of its JRR-3 research reactor, and blocked outside access. 367 files (175 people) contained personal data: 200 images of photo ID such as driving licences and My Number cards (6 with My Numbers), 146 special health check results for radiation work and 21 radiation worker certificates. According to the Yomiuri Shimbun, an ID with no usage history was apparently created and used.
Disclosed
2026-10-01 17:46
Organizations involved
1
Leaked or at risk
175
175
Downtime
Unknown
Timeline
- Detected 2026-09-25
- Disclosed 2026-10-01
- 6 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak][Service outage]
- Entry point
- Web app
Data exposed or at risk
Organizations involved
[Breached][Critical]Ibaraki, TokaiScientific research, professional and technical services175 leaked
Japan Atomic Energy Agency
Sources
- [1][Official]不正アクセスによる情報漏えいについてJAEA · 2026-10-01
- [2][News]「原子力機構」の研究用原子炉サイトに不正アクセス、175人分の運転免許証など個人情報漏えいThe Yomiuri Shimbun · 2026-10-01 17:46