nostrum-smartspi-2026 · Disclosed 2026-07-09
福岡大学: unauthorized access and impact
The vendor Nostrum’s network was compromised; file encryption and a backdoor were confirmed. Up to 33,668 students’ identifiers, dates of birth and mock-test results and up to 800 registered names may be affected; direct extraction evidence was not found.
Outcome: Confirmed breach
Entry path and evidence
Timeline
Reported response
- Reported fact
External access was blocked; specialists investigated and authorities were notified.
[s1]§§1-4
Cause and mitigation hypotheses
Not assessed. Editorial hypotheses have not been added for this incident; this does not establish safety or a confirmed cause.
Evidence relevant to prevention
Insufficient evidence
Undisclosed entry or patch timing prevents an avoidability assessment. Inspect privileges, retrieval logs, retention and deployed configuration using the linked rules.
Editorial assessment; not a determination of liability. [s1]
Unknowns and AI involvement
The reviewed disclosures do not establish attacker use of AI.
The notice does not establish all entry, timing and extraction details; unresolved claims remain unknown.
Sources
[s1] 福岡大学 · Primary source
福岡大学:事故に関する公表資料 ↗Reviewed 2026-10-09