Skip to content
JAENES
ALeak confirmedOctober 21, 2026 announced

大阪大学Data breach / unauthorized access incident

笹尾 祐太朗の写真Reviewed by Yutaro SasaoWritten by Leak Watch editorial team published ・ updated
Occurred on
September 26, 2026
Announced on
October 21, 2026
Severity
AFinancial and HR records — information that easily translates into monetary damage.
Scale
77,851 people
Main impact
Files that NEC had shared on cloud storage were downloaded by a third party, and it was confirmed that personal data of 77,851 people (alumni, current students, and faculty/staff) — including names, university IDs, and university-issued email addresses — were included.
Information involved
Full nameUser / member IDEmail address
Cause / key point
The leak resulted from NEC, which is contracted to operate the university-wide educational computing system, sharing files on cloud storage without contractual authorization, and those files being downloaded by a third party.About Supply chain attacks (via vendors & shared services)
Industry
Education
Listing / capital
Government / public body
Last updated
October 22, 2026
Full nameUser / member IDEmail addressHow severity is assessed →

Is this incident worth paying attention to?

Written & reviewed

笹尾 祐太朗の写真

Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.

CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.

Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:

Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction

Related incidents

Browse the database →

Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).

Incidents related to "クラウドストレージ"

Incidents where the damage spread through the same service or system.

Incidents related to "ダウンロード"

Incidents where the damage spread through the same service or system.

Same attack method

Same industry

Attack method classification: Supply chain attacks (via vendors & shared services)(Compromising the provider instead of the user)

Read the Supply chain attacks (via vendors & shared services) guide and national trends →

← Back to Breach Watch