Science & Tech · Cybersecurity · 13 hrs ago
Waseda University says data from about 3,400 records was accessed
Waseda University said an intruder accessed information linked to about 3,400 records.
The university found signs of the breach on August 31 while checking its systems as it addressed a PHP vulnerability.
The intruder entered a system that manages login details for MyWaseda, a portal for services including email.
The exposed records included information about staff, students and alumni, as well as user details such as names, email addresses and encrypted passwords.
The university has not confirmed any other data was taken, but says it cannot rule out that possibility and is continuing its investigation.
It has restricted access to affected systems and advised students and staff to change their Waseda email passwords.
Alumni cannot use some Waseda ID services for now while the university checks that they are safe.
Waseda University said information from about 3,400 records was accessed by an unauthorized party.
The university found signs of unauthorized access on August 31 while checking its systems during work on a PHP vulnerability.
The accessed information included 81 records about faculty, staff, students and alumni, and 3,261 user-information records.
Waseda said it had not confirmed the leakage of other information but could not rule out that possibility.
It restricted systems and services, changed administrator passwords and is investigating with a security firm.
- Who
- Waseda University and an unauthorized party.
- What
- The university said information from about 3,400 records was accessed.
- When
- Signs of unauthorized access were found on August 31. Waseda announced the incident on November 9.
- Where
- A system managing user information used to log in to MyWaseda.
- Why
- The university found the access while checking its systems in response to a PHP vulnerability. The motive for the access is not stated.
This story does not have two clearly opposing sides.
Waseda found signs of unauthorized access while checking its systems during work on a PHP vulnerability.
Waseda announced that an unauthorized party had accessed information from about 3,400 records.
- Records
- About 3,400
- Affected information
- 81 records about faculty, staff, students and alumni
- User information
- 3,261 records
- Announcement
- November 9
- Access signs found
- August 31