SHINDO3

Hokkaido University Faculty of Information Science and Technology

Personal data106people

POSSIBLE LEAKFull name / Usage historyTheft · Closed (final report)

Open in the live monitor ▶
Disclosed
Dec 9, 2025
Detected
Oct 7, 2025
Detection to disclosure
63 days
Leak
Leak possible
Type
Theft
Status
Closed (final report)
Security spend
Not checked yet
Compensation
Not announced

What leaked

IdentityFull name
Transactions & activityGraduation year and degree
Employment & HREmployer name

How many

  • Students and graduates of five labs 106 people

Who is affected

  • Students and graduates

Cause

An outsider entered a lab and used a computer left unattended while logged in; traces showed that files shared within the lab were downloaded and a USB memory stick was connected

Timeline

  1. An outsider entered the lab in the evening
  2. Investigation began after a student's report
  3. Date of the Security NEXT report

Response

  • Forensic investigation

What you should do

  1. Check the company's notice to see if you're affected

Lessons for companies

  1. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  2. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources