SHINDO3

Tohoku University

Unauthorized accessSize not disclosed

POSSIBLE LEAKHealth / medical / treatmentInvestigating

Open in the live monitor ▶
Disclosed
May 1, 2026
Detected
Apr 16, 2026
Detection to disclosure
15 days
Leak
Leak possible
Type
Unauthorized access
Status
Investigating
Security spend
Not checked yet
Compensation
Not announced

What leaked

Special-care dataPatients' personal data (clinical-trial work files)

Not leaked

  • No impact on other medical information systems confirmed so far

Who is affected

  • Patients connected with Tohoku University Hospital clinical trials

Cause

A faculty member's PC was misused to access devices, including a NAS holding clinical-trial files

Timeline

  1. Detected
  2. Password reset on some systems and part of the campus network isolated
  3. First disclosure

Response

  • Password reset
  • Blocked the entry point
  • Forensic investigation

Password resets, network segments isolated, continuing to identify the devices accessed

What you should do

  1. Health data can't be taken back. Don't answer blackmail; call the police (#9110) or the consumer hotline (188)
  2. Check the company's notice to see if you're affected

Lessons for companies

  1. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  2. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources