SHINDO4

Saitama University

Inventors and others1,516people

POSSIBLE LEAKFull name / EmployerUnauthorized access · Investigating

Open in the live monitor ▶
Disclosed
Mar 30, 2026
Detected
Oct 8, 2025
Detection to disclosure
173 days
Leak
Leak possible
Type
Unauthorized access
Status
Investigating
Security spend
Not checked yet
Compensation
Not announced

What leaked

IdentityNames of inventors and patent attorneys
Employment & HRAffiliated organization name and address

How many

  • Inventors and others 1,516 people

Who is affected

  • Inventors
  • Patent attorneys

Cause

The patent system built by the contractor was reachable from outside; traces of crypto-mining malware and ransomware were found

Timeline

  1. Reachable from outside since set-up
  2. Crypto-mining malware found during server maintenance
  3. First disclosure

Response

  • Service stopped
  • Forensic investigation
  • Notified individuals

Outside forensic investigation; system stopped; individual notifications; reported to and consulted relevant bodies

What you should do

  1. Expect targeted phishing posing as HR or interview contacts
  2. Check the company's notice to see if you're affected

Lessons for companies

  1. Put security requirements, audit rights and reporting deadlines in vendor contracts
  2. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  3. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources