175 individuals' personal information leaked in security breach at research organization

A close-up of shiny black and white piano keys — Hadi Samadzad / Unsplash

On October 1, a research organization announced that personal information of 175 individuals was leaked due to unauthorized access to a research support site. The Japan Atomic Energy Agency (JAEA) operates the site, which is used for procedures related to the utilization of the research reactor "JRR-3" located in Tokai Village, Ibaraki Prefecture. Unauthorized access was confirmed on September 25, revealing that 2419 files were downloaded from the site by external parties.

Among the leaked files, 367 contained personal information pertaining to 175 individuals. This included 200 images of identity documents with photos, 146 results from special health examinations for radiation workers, and 21 certificates for radiation workers, with some users having multiple entries. Notably, the personal information of six individuals included My Number, a unique identification number in Japan.

According to the organization, user account information and names from the registration forms were not leaked, and the site operates independently from the organization's internal business network, ensuring no impact on other systems. The organization is moving forward with individual notifications to affected individuals and has reported the incident to the Personal Information Protection Commission, relevant government agencies, and the police.