Saga University ransomware attack may expose personal data of about 80,000 people
Following an investigation into a ransomware attack on administrative network-attached storage (NAS) in September 2026, Saga University disclosed that personal information belonging to about 80,000 students, academic and other staff, alumni, and others may have been leaked. The potentially affected data may include names, addresses, passwords, and the names, dates of birth, diagnoses, and treatment histories of patients at its affiliated hospital. The university confirmed file tampering and a threatening message and is investigating whether data was actually exfiltrated, the extent of the impact on patient information, and the route of intrusion.
Key facts
- Affected organisation
- Saga University
- Incident type
- Ransomware
- Occurred / detected
- 2026-09
- Scale of damage
- Potential exposure of personal information belonging to about 80,000 students, academic and other staff, alumni, and others; the extent of the impact on patients at the affiliated hospital remains under investigation
- Cause / method
- Ransomware attack on administrative NAS
- Location
- Japan
If your data was exposed
Exposed dataNameAddressDate of birthPasswordHealth & medical data
- Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- The university announced that its investigation into the ransomware attack indicated that personal information belonging to about 80,000 people and patient information from its affiliated hospital may have been leaked.
- It emerged that investigations into whether information was actually exfiltrated and the extent of the impact on patients were ongoing.
11 related reports
- Saga University Data Breach: Am I Affected? About 80,000 Students, Faculty and Staff, Hospital Patient Information Under Investigation (Ransomware), Potentially Leaked Information, and Known Facts
- 佐賀大学：事務用NASへのランサムウェア被害と個人情報流出の可能性
- 事務情報システムにおけるランサムウェア被害の発生について
- 佐賀大学にサイバー攻撃 約8万人の個人情報流出か 大学病院患者の病名や名前も【佐賀県】
- 佐賀大にサイバー攻撃、学生や教職員ら８万人分の個人情報流出か…付属病院の患者情報も・脅迫受けたと説明
- Saga University ransomware attack (personal data of students, staff and former students may have leaked, about 80,000 people, plus patient information): what people whose names, addresses and passwords are listed should do
- 佐賀大学のランサムウェア被害（学生・教職員・元学生などの個人情報が流出した可能性、約8万人分、患者情報も）：氏名・住所・パスワードなどが対象の人がやること
- サイバー攻撃や個人情報流出などの相談窓口について
- 業務委託企業への不正アクセスによる個人情報流出に関するお詫びとお知らせ
- 佐川急便株式会社への不正アクセスに伴う個人情報流出の可能性について：お知らせ
- 不正アクセスによる個人情報流出に関するお詫びとお知らせ
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.