Cyber-attack on Osaka Metropolitan University exposes personal information of 170,000 people
A cyber-attack on Osaka Metropolitan University in October caused system disruptions and class cancellations, and an investigation confirmed that the personal information of 170,000 students and staff had been exposed. The exposed data included names and dates of birth, while records for approximately 1,400 people also included bank account numbers and passport images. It emerged that NEC, which managed the system, and its subcontractor had failed to delete the data after the system migration.
Key facts
- Affected organisation
- Osaka Metropolitan University
- Incident type
- Data breach
- Occurred / detected
- 2026-10
- Scale of damage
- Personal information of 170,000 students and staff, including bank account numbers, passport images and other data for approximately 1,400 of them
- Cause / method
- A cyber-attack on a system subcontractor for the cloud managed by NEC, and failure to delete data after the system migration
- Location
- Japan
If your data was exposed
Exposed dataNameDate of birthBank accountID document copy
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- It emerged that university classes had been cancelled following a suspected ransomware attack.
- The university announced that the personal information of 170,000 students and staff had been exposed.
- It emerged that NEC and its subcontractor had failed to delete the data after the system migration.
10 related reports
- Osaka Metropolitan University cancels classes after suspected ransomware attack
- 大阪公立大学「学生・教職員の個人情報17万人分が漏えい」と発表 情報の一部には銀行口座番号やパスポート画像など約1400人分含まれる 10月のサイバー攻撃によるシステム障害を調査する中で判明
- 大阪公立大学「学生・教職員の個人情報17万人分が漏えい」と発表 情報の一部には銀行口座番号やパスポート画像など約1400人分含まれる 10月のサイバー攻撃によるシステム障害を調査する中で判明（関西テレビ）
- 大阪公立大学、NEC管理クラウドへのサイバー攻撃で約17万人分の個人情報漏えい-NECと再委託先がシステム移行後もデータ削除せず|セキュリティニュースのセキュリティ対策Lab
- 大阪公立大 パスポート画像含む17万人分の個人情報漏えい 管理するNECにサイバー攻撃
- 大阪公立大 17万人分の個人情報漏えい 銀行口座などの情報も
- 大阪公立大の学生・教職員１７万人分の氏名や生年月日など流出、一部は銀行口座やパスポート画像も…システム再委託先にサイバー攻撃（読売新聞オンライン）
- 両陛下が「海づくり大会」で大阪入り サイバー攻撃で予定変更も
- 両陛下が「海づくり大会」で大阪入り サイバー攻撃で予定変更も（毎日新聞）
- 天皇皇后両陛下 「全国豊かな海づくり大会」など出席のため大阪府に あす泉佐野市で魚を放流 一部日程がサイバー攻撃影響で取りやめ
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.