[BreachExchange] Hackers may have stolen the personal data of 80, 000 people associated with Osaka University

[Destry Winant]

https://www.japantimes.co.jp/news/2017/12/13/national/crime-legal/hackers-may-stolen-personal-data-80000-people-associated-osaka-university/#.WjH_TbQ-c1I

Osaka University said Wednesday that personal data of around 80,000
students, graduates, staff, former workers and others may have been
stolen by hackers.

Data pertaining to about 69,000 people — which includes names,
identification numbers and email addresses — may have been stolen. In
addition, information included in personnel emails regarding up to
11,000 people was possibly breached due to unauthorized network access
between May and July, the university said.

Using one lecturer’s ID and password, the university’s computer system
was illegally accessed several times from overseas. A manager’s ID was
obtained through the access sessions, which in turn was used to
install data-stealing malware, according to the university.

The stolen information also contained lists of donors to the
university and pay records.

“We deeply apologize for causing great trouble,” said Yoshihiro
Kizawa, a university trustee.

The school said all computer system users changed their password as a
countermeasure. No breach of patients’ data at Osaka University
Hospital has been confirmed.