Breaches and incidents

Osaka Metropolitan University: ransomware on virtualization platform stops about 500 servers, classes cancelled

Per Kyodo and Business+IT, a system-wide outage began early on 2 Oct.

Disclosed
Verification
Confirmed by two or more outlets

What happened

  • Per Kyodo and Business+IT, a system-wide outage began early on 2 Oct; the university said on 5 Oct it was ransomware, intrusion into the virtualization platform stopped about 500 servers and “many of the backup data needed for restoration were also encrypted”; classes were cancelled 2 to 8 Oct.
  • Root cause: intrusion into the virtualization platform; initial access not disclosed.
  • No attacker named.
  • At least 130,000 students’, graduates’ and staff records (names, addresses, emails, ID photos per Kyodo) were on the attacked systems and a leak is under investigation; in-person classes resumed 9 Oct with temporary systems and email partly restored 13 Oct.