jaea-jrr3-files-2026 · Disclosed 2026-10-01
日本原子力研究開発機構: unauthorized access and impact
2,419 research-support files were downloaded without authorization. 367 personal-data files for 175 people leaked, including identification numbers for six people.
Outcome: Confirmed breach
Entry path and evidence
Timeline
Disclosure date established by the reviewed notice. [s1]
Reported response
- Reported fact
External access was stopped and affected people notified; the site is independent of the business network.
[s1]本事象の概要 / 漏えいした個人情報 / 対応状況
Cause and mitigation hypotheses
Not assessed. Editorial hypotheses have not been added for this incident; this does not establish safety or a confirmed cause.
Evidence relevant to prevention
Insufficient evidence
Undisclosed entry or patch timing prevents an avoidability assessment. Inspect privileges, retrieval logs, retention and deployed configuration using the linked rules.
Editorial assessment; not a determination of liability. [s1]
Unknowns and AI involvement
The reviewed disclosures do not establish attacker use of AI.
The initial entry route is undisclosed. Downloaded files, personal-data files and affected people are different units.
Sources
[s1] 日本原子力研究開発機構 · Primary source
日本原子力研究開発機構：事故に関する公表資料 ↗Reviewed 2026-10-09