The Japan Atomic Energy Agency (JAEA) announced on October 1 that personal information belonging to 175 users was leaked due to unauthorized access to one of its research support websites.
The research support website operated by JAEA is utilized for facility usage procedures for the JRR-3 research reactor, located at the Nuclear Science Research Institute in Tokai-mura, Ibaraki Prefecture. Unauthorized access was confirmed on September 25, revealing that 2,419 registered files had been downloaded externally.
Of these, 367 files contained personal information, affecting 175 individuals. Specifically, 200 files were images of photo identification cards, 146 files contained special health checkup results for radiation work, and 21 files were certificates for radiation workers. Some users were affected by multiple types of leaked data. Notably, six of the identification cards included My Number data.
According to JAEA, user account information and names from registration forms on the research support website were not leaked. Furthermore, as the site operates independently from the agency's internal business network, there is no impact on other systems. JAEA stated that it is in the process of individually notifying affected parties and has reported and consulted with the Personal Information Protection Commission, relevant government agencies, and the police.
