Level Enter: unauthorized access to the AI.R-Scorer essay scoring service

On 22 October, Level Enter, which runs the essay scoring service AI.R-Scorer for schools, said its server had been accessed without authorization. An inspection on 21 October found a suspicious program; an attacker had exploited a flaw in the web application platform software on 5 December 2025 and planted a remote-control program, leaving the server's data open to viewing or copying since then. The data includes names, email addresses and hashed passwords of teachers and students, students' ID numbers and school names, submitted essays and scores, and names, addresses and phone numbers of contract contacts. Whether data was taken has not been established. The service now runs on a newly built server. On 27 October, user school Nitta High School said 281 students who tried the service in the 2025 school year and 7 staff members are affected.