SOLUMINA: break-in at the QLIFICA Monitoring clinical trial system; user account data may have leaked
The QLIFICA Monitoring clinical trial system was broken into and its operator SOLUMINA stopped the service. Kyushu University said account data of 9 staff may have leaked.
Disclosed
2026-10-28
Organizations involved
2
Leaked or at risk
Unknown
Downtime
Unknown
What happened
The QLIFICA Monitoring cloud system for clinical trials, provided by SOLUMINA, was accessed without authorization. After learning of it, SOLUMINA stopped the service and is investigating how the attacker got in and what data left. User Kyushu University disclosed it on 28 October 2026; no notice by SOLUMINA has been found yet. [1]
Impact
Names, departments, email addresses, login IDs and password hashes of 9 Kyushu University Hospital staff may have leaked. Whether the 9 are among the data actually taken is under investigation. So far there is no sign that patient or trial subject data, sensitive personal data or business data were taken. [1]
Response
Kyushu University briefed the staff concerned and asked them to change the same password on other services. It reported to its CSIRT and the Personal Information Protection Commission and is asking the contractor for the cause and preventive measures. [1]
Timeline
- Disclosed 2026-10-28
- 1 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak][Service outage]
- Entry point
- Unknown
Data exposed or at risk
Supply chain
Organizations involved
[Breached][Major]Kanagawa, Yokohama, NishiInformation and communications
SOLUMINA Co., Ltd.[Through a supplier][Moderate]Fukuoka, Fukuoka, NishiEducation and learning support9 leaked
Kyushu UniversityUsed under contract by the ARO Next-Generation Medical Center of Kyushu University Hospital. Names, departments, email addresses, login IDs and password hashes of 9 staff are affected.
Sources
- [1][Official]外部サービスへの不正アクセスに伴う個人情報の漏えい等についてKyushu University · 2026-10-28