Osaka Metropolitan University resumes in-person classes after ransomware attack
In short
Osaka Metropolitan University (大阪公立大学) resumed in-person classes on October 9 after a large-scale system failure, attributed to a ransomware attack, forced it to cancel classes in all faculties from October 2. About 500 servers stopped and systems remain down, so the university has built a temporary replacement system. Personal information of at least 130,000 people, including students and graduates, may have leaked.
Read the full story 2 min read
Osaka Metropolitan University (大阪公立大学) resumed in-person classes on October 9, after a large-scale system failure forced it to cancel classes in all faculties from October 2, Tokyo Shimbun and Nishi-Nippon Shimbun reported. TBS NEWS DIG reported that in-person classes were to resume at all campuses, as originally scheduled. [ 2 , 4 , 5 ]
According to the university, the failure occurred in the early hours of October 2 at the core systems on campus, and about 500 servers stopped at once. The internal systems used for classes and assignment submission, as well as email, became unavailable, Nippon TV News and TBS NEWS DIG reported. Tokyo Shimbun and Nishi-Nippon Shimbun reported that the academic systems used for sharing teaching materials and email became generally unavailable, and that there were traces of some data having been altered. [ 1 , 3 , 4 , 5 ]
The university said the failure is believed to have been caused by a ransomware attack. Nippon TV News reported that the university announced this at a press conference on October 5, while TBS NEWS DIG put the press conference on October 4. Nippon TV News also reported that much of the backup data had been encrypted. The attacker is not known, according to Tokyo Shimbun and Nishi-Nippon Shimbun. [ 1 , 2 , 4 , 5 ]
The attacked systems contained personal information of at least 130,000 people. Nippon TV News said this covered students, graduates and faculty and staff; TBS NEWS DIG said the data included addresses, email addresses and mobile phone numbers; Tokyo Shimbun and Nishi-Nippon Shimbun said names, addresses, email addresses and student ID photos of current students and graduates may have leaked. The university said it is investigating whether information leaked. According to Nippon TV News, it has not disclosed whether a ransom was demanded. [ 1 , 2 , 4 , 5 ]
There is still no prospect of restoring the systems, the university said. As a temporary measure until recovery, it has built and is operating a replacement system, which Tokyo Shimbun and Nishi-Nippon Shimbun said allows class information to be shared and assignments to be submitted. [ 1 , 2 , 4 , 5 ]
Why it matters
The failure took down the systems used for classes, assignment submission and email, and no date has been given for their recovery. The affected systems held personal data such as names, addresses, email addresses and student ID photos of at least 130,000 people, and the university says it is still investigating whether any of it leaked.
Key facts
- Osaka Metropolitan University resumed in-person classes on October 9. [ 1 , 2 , 3 , 4 , 5 ]
- Classes in all faculties had been cancelled from October 2 to October 8 after a large-scale system failure. [ 1 , 2 , 3 ]
- The failure began in the early hours of October 2, and about 500 servers stopped. [ 1 , 4 , 5 ]
- The university said the failure is believed to have been caused by a ransomware cyberattack. [ 1 , 2 , 4 , 5 ]
- The affected systems held personal information of at least about 130,000 people, including students and graduates. [ 1 , 2 , 4 , 5 ]
- There is no prospect yet for restoring the original systems; a temporary system has been built to share class information and accept assignments. [ 1 , 2 , 4 , 5 ]
- The attacker has not been identified. [ 4 , 5 ]
Confirmed by several sources
- Osaka Metropolitan University resumed in-person classes on October 9 after cancelling classes from October 2. [ 1 , 2 , 3 , 4 , 5 ]
- The system failure is believed to have been caused by a ransomware attack. [ 1 , 2 , 4 , 5 ]
- About 500 servers stopped when the failure began in the early hours of October 2. [ 1 , 4 , 5 ]
- Personal information of at least about 130,000 people was held on the affected systems. [ 1 , 2 , 4 , 5 ]
- A temporary replacement system has been built while the original systems remain down. [ 1 , 4 , 5 ]
Still unclear
- Whether personal information was actually leaked. The university says it is still investigating; outlets describe a possible leak.
- Whether a ransom was demanded. Nippon TV News reported the university has not disclosed this.
- Who carried out the attack. Tokyo Shimbun and Nishi-Nippon Shimbun reported the attacker is unknown.
- The date of the press conference where the ransomware cause was announced. Nippon TV News said October 5; TBS NEWS DIG said October 4.
- When the original systems will be restored. The university says there is no prospect of recovery yet.
- Whether much of the backup data was encrypted. Reported only by Nippon TV News.
What local media are saying
Timeline, local time
- October 8: Nippon TV News reports the university will resume in-person classes on October 9 and build a replacement system. [ 1 ]
- October 8: TBS NEWS DIG reports classes will resume at all campuses on October 9 and that data of about 130,000 people may have leaked. [ 2 ]
- October 9: Tokyo Shimbun reports the university has resumed in-person classes while the system failure continues. [ 4 ]