SHINDO1

Wakayama University

Unauthorized accessSize not disclosed

NO LEAK FOUNDClosed (final report)

Open in the live monitor ▶
Disclosed
Jun 17, 2026
Detected
Jun 12, 2026
Detection to disclosure
5 days
Leak
No leak
Type
Unauthorized access
Status
Closed (final report)
Security spend
Not checked yet
Compensation
Not announced

Not leaked

  • The tool held only campus images; any data leak is denied

Who is affected

  • Virtual tour visitors

Cause

A third party exploited a vulnerability in the virtual tour tool to redirect visitors to inappropriate sites

Timeline

  1. Detected
  2. First disclosure

Response

  • Service stopped
  • Vulnerability testing

Closed the page immediately; auditing the whole website and strengthening information security

What you should do

  1. Check the company's notice to see if you're affected

Lessons for companies

  1. Patch internet-facing servers, VPNs and admin panels first. Exploits follow disclosure within days
  2. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  3. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources