Завершено
Osaka Metropolitan University: 130,000 people's data at risk after ransomware attack
Коротко
Osaka Metropolitan University said on Oct 5 that a ransomware cyberattack caused the system failure that began in the early hours of Oct 2 and stopped about 500 servers, and that personal information of at least 130,000 students, graduates and staff may have leaked. Classes have been cancelled through Oct 8, with face-to-face teaching to resume from Oct 9 and the entrance exam application period extended to Oct 22. The university said it has no recovery timetable and is still investigating whether data actually leaked and whether a ransom was demanded.
Почему это важно
The attack knocked out the core systems of a public university for nearly a week, halting classes and disrupting entrance exam applications, and the university says much of its backup data is unusable. With information on at least 130,000 people potentially exposed and police, the education ministry and the privacy regulator notified, the case adds to a run of ransomware incidents affecting Japanese institutions and companies reported by national and technology outlets.
Ключевые факты
- A large-scale failure of the university's information infrastructure system began in the early hours of Oct 2 and affected all five campuses. [ 1 , 2 , 4 , 5 , 8 , 13 ]
- Classes were cancelled from Oct 2 through Oct 8, and face-to-face classes are to resume from Oct 9. [ 1 , 2 , 3 , 5 , 8 , 13 ]
- The university said the failure was caused by a ransomware cyberattack. [ 2 , 4 , 5 , 8 , 10 , 11 , 13 , 15 ]
- About 500 servers stopped, and much of the backup data was encrypted, the university said. [ 2 , 8 , 10 , 13 ]
- Personal information of at least 130,000 students, graduates and staff may have leaked. [ 7 , 8 , 10 , 13 , 14 , 15 ]
- The entrance examination application period was extended to Oct 22. [ 2 , 5 , 13 ]
- The medical school hospital and the veterinary clinical centre were unaffected and operating as usual. [ 2 , 5 , 13 ]
- The university said it has no recovery timetable. [ 2 , 5 , 13 ]
Подтверждено несколькими источниками
- A large-scale failure of the university's information infrastructure system began in the early hours of Oct 2 and affected all five campuses. [ 1 , 2 , 4 , 5 , 8 , 13 ]
- Classes were cancelled from Oct 2 through Oct 8, with face-to-face classes to resume from Oct 9 and the timing of online classes undecided. [ 1 , 2 , 3 , 5 , 8 , 13 ]
- The university said the failure was caused by a ransomware cyberattack. [ 2 , 4 , 5 , 8 , 10 , 11 , 13 , 15 ]
- About 500 servers stopped and much of the backup data was encrypted, according to the university. [ 2 , 8 , 10 , 13 ]
- Personal information of at least 130,000 students, graduates and staff may have leaked. [ 7 , 8 , 10 , 13 , 14 , 15 ]
- The entrance examination application period was extended to Oct 22. [ 2 , 5 , 13 ]
- The medical school hospital and the veterinary clinical centre were unaffected and operating normally. [ 2 , 5 , 13 ]
- The university said it has no recovery timetable. [ 2 , 5 , 13 ]
Пока неясно
- Whether a ransom was demanded Asahi Shimbun and Nippon TV News reported the university did not disclose this; the other documents do not mention a demand.
- Whether personal information actually leaked The university said this was still under investigation at the Oct 5 press conference; several outlets report only that a leak is feared.
- When the systems will be restored Livedoor News, Sankei Shimbun and Nikkei report the university has no recovery timetable.
- When online classes will resume The university said this would be decided according to recovery progress, and no date has been given.
- How certain the university is that ransomware was the cause Asahi Shimbun said the university determined it was a ransomware cyberattack, ITmedia said it judged an attack highly likely, NHK reported the university presented that as its view, and Sankei Shimbun reported ransomware as a possibility being examined with specialist support.
- The date of the press conference TBS NEWS DIG's summary refers to a press conference on Oct 4, while Livedoor News, Sankei Shimbun and other reports say the conference was held on Oct 5.
- Whether data was altered Nikkei alone reported confirmed traces of some data being tampered with.
- Whether records from predecessor institutions are involved Jiji Press alone reported the data at risk may include information from the pre-merger Osaka Prefectural University and Osaka City University.
- The entrance exam application deadline ITmedia, citing Kyodo News, reported a deadline of Oct 8 in a report published at 1:50 p.m. on Oct 5, while the university said at its press conference that day that the period was extended to about Oct 22.
- Data types at risk Nikkei reported names, addresses, email addresses and student ID photographs; Jiji Press reported names, addresses and email addresses.
Что пишут местные СМИ
Технологические СМИITmedia focused on the operational disruption, reporting that classes were suspended through Oct 8, that most systems were still unreachable at 1 p.m. on Oct 5 apart from a temporary notice site, and that entrance exam applications were affected, citing Kyodo News for an Oct 8 deadline; a later bulletin reported the ransomware finding and the possible leak of more than 130,000 people's information.
[
1
,
15
]
Деловые СМИNational papers and broadcasters led with the ransomware determination and the possible exposure of personal information. Asahi Shimbun reported the university did not say whether a ransom was demanded; Sankei Shimbun described ransomware as one possibility under investigation by outside specialists; Jiji Press and Nikkei quoted president Hiroyuki Sakuragi; Nikkei reported the university had notified Osaka prefectural police, the education ministry and the government's personal information protection commission.
[
3
,
4
,
5
,
7
,
8
,
10
,
13
,
14
]
Сообщества и соцсетиLivedoor News carried the fullest account of the Oct 5 press conference, including the president's apology, the five affected campuses, about 500 stopped servers, encrypted backups, the unaffected hospital systems, the investigation into a possible leak and the roughly two-week extension of the application period. Yahoo! News Japan aggregated reports on the apology and the ransomware finding alongside a reader prompt on cyberattacks.
[
2
,
6
]
Официальные источникиNHK News reported the university's view that it had suffered a ransomware cyberattack at a press conference on Oct 5, in a short item alongside unrelated news.
[
11
]
Хронология, местное время
- A large-scale failure occurs in the university's information infrastructure system. [ 1 , 2 , 4 , 5 , 8 , 10 , 13 ]
- The university announces the cancellation of classes, ultimately covering Oct 2 to Oct 8, and sets up an emergency website separate from its core systems. [ 1 , 2 , 4 , 5 , 8 , 13 ]
- The cause of the system trouble is still under investigation, the university says. [ 2 ]
- Most of the university's systems remain unreachable, apart from a temporary notice site. [ 1 ]
- ITmedia reports the outage and the disruption to entrance exam applications, citing Kyodo News for an Oct 8 deadline. [ 1 ]
- The university holds a press conference at the Public University Corporation Osaka in Joto Ward, Osaka City; president Hiroyuki Sakuragi apologises and the university announces the application period will be extended to about Oct 22. [ 2 , 3 , 5 ]
- TBS NEWS DIG and Livedoor News publish reports on the press conference. [ 2 , 3 ]
- Asahi Shimbun reports that the university determined the failure was a ransomware cyberattack and did not disclose whether a ransom was demanded. [ 4 ]
- Sankei Shimbun reports the university's view that a server attack caused the failure, with ransomware a possibility being examined with specialist support. [ 5 ]
- Jiji Press reports that information on at least 130,000 people may have leaked. [ 10 ]
- Nikkei reports the university notified Osaka prefectural police, the education ministry and the personal information protection commission, and that traces of data tampering were found. [ 13 ]