SHINDO4

International Budo University

Graduates~120people

LEAK CONFIRMEDDate of birth / Postal addressUnauthorized access · Investigating

Open in the live monitor ▶
Disclosed
Mar 18, 2026
Detected
Nov 2025
Detection to disclosure
137 days
Leak
Leak confirmed
Type
Unauthorized access
Status
Investigating
Security spend
Not checked yet
Compensation
Not announced

What leaked

Account dataStudent ID number
IdentityName, Name in katakana, Date of birth
ContactPhone number, Address

How many

  • Graduates ~120 people

Who is affected

  • Graduates who took the teacher-training care experience in 2019

Cause

Unauthorized outside access to the contractor's internal network

Timeline

  1. The contractor detected suspicious server access (early November)
  2. Detected
  3. First disclosure

Response

  • Blocked the entry point
  • Forensic investigation

The contractor isolated servers and continues investigating

What you should do

  1. Treat refund or apology calls and texts as scams. Call back only on the number from the official site
  2. Watch for unexpected mail or invoices; your address is hard to change
  3. Check the company's notice to see if you're affected

Lessons for companies

  1. Put security requirements, audit rights and reporting deadlines in vendor contracts
  2. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  3. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources