> JapanHacked_
[Investigating][Severity: Major][Intrusion]

Ohara Gakuen: web server intrusion

Ohara Gakuen's web server was accessed without authorization; names and contact details of staff job applicants, graduate students and others may have leaked.

Disclosed

2026-10-30

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. The school noticed anomalies on a web server. [1]

  2. It reported to the Personal Information Protection Commission. [1]

  3. It stopped the websites of its schools and partly resumed them from 17:00 on 23 October. [2]

  4. It disclosed the unauthorized access. The staff recruiting site and the Ohara Graduate School site remain offline. [1]

Impact

  • Staff job applicants: name, address, phone number, email address and résumé contents [1]
  • Staff registered in the admin systems: name and email address [1]
  • Graduate students: name, student number, address, date of birth and email address [1]
  • Seminar applicants: name, email address and phone number [1]
  • Photos of staff [1]

All of this may have leaked; no data removal has been confirmed, and no counts were given. [1]

Timeline

  1. Detected 2026-10-13
  2. Disclosed 2026-10-30
  3. 17 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak][Service outage]
Entry point
Web app

Data exposed or at risk

[Name][Postal address][Phone number][E-mail address][Date of birth][Employment][Education]

Organizations involved

Sources

  1. [1][Official]Webサーバーへの不正アクセスについてOhara Gakuen · 2026-10-30
  2. [2][Official]Webサイトの一時停止と一部再開について（お詫び）Ohara Gakuen