Investigating

Nihon University Law: phishing takeover of a staff mailbox may have exposed stored personal data

One staff mailbox was taken over via phishing and used to send 3,177 suspicious mails. The attacker could view the mailbox, so stored personal data may have been obtained; disclosed Aug 25, 2026 (updated Sep). Separate from the Sangenjaya campus incident.

Last updated: 2026-11-09

Overview

No published PII headcount (blank); 3,177 is spam volume, not a leak count.

Timeline

UnknownOccurred
UnknownDiscovered
2026-08-25Disclosed

Organization response

Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.

What you can do

Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.

Sources

不正アクセスによる迷惑メール発信に関するおわびと御報告日本大学法学部 · 2026-11-09
不正アクセスによる迷惑メール発信に関するおわびと御報告（更新）日本大学法学部 · 2026-11-09

Nihon University Law: phishing takeover of a staff mailbox may have exposed stored personal data

Overview

Timeline

Organization response

What you can do

Sources

Related information

No published information yet

Comments and replies

Write a comment