Osaka after-school room: support scam makes data for 415 children, parents and staff accessible

A room D employee called the number on a fake security warning and installed a remote-access app at the instruction of someone claiming to be Microsoft support. It emerged on 2 October, when the connection was cut, app removed and passwords changed. Investigation found about 3 minutes 29 seconds of remote operation/viewing, but no external transmission traces within observable evidence. Findings were reported on 5 November and disclosed on the 9th. [1] [2]

Up to 415 people are affected: 213 children, 168 parents and 34 staff/others. Children’s fields include names, grades, birth dates, addresses, schools, allergy-related needs and some attendance logs. One child’s disability/support-class, rehabilitation-certificate and treatment-provider details are included. Parent names, relationships, phones and daytime availability, plus staff names/phones, may be accessible. Financial loss and misuse are unconfirmed. This count is separate from the three other rooms disclosed on 30 September. [2] [1]