MHLW: JANIS cyberattack puts up to 11,652 medical-institution contacts’ data at risk

JIHS, MHLW’s contracted operator, reported a data-stealing program placed on the JANIS web server that may have run. At-risk information includes up to 11,652 medical-institution contacts’ names, titles, phones and email, plus hospital names, bed counts, institutional addresses/postcodes and registered resistant-organism data. Contact and institutional/surveillance data are distinguished; patient medical-history exposure is not established. [1]

The system is stopped to prevent further harm while cause and impact are investigated. Individual notification is planned and secondary misuse is not confirmed. An earlier 27 October item on the page announced a safety-related suspension; suspected exposure was disclosed on 6 November. [1]