The Japan Chamber of Commerce and Industry announced on November 10 that the examination management system (external server) used for online examinations such as bookkeeping had been accessed without authorization and that a malicious program had been installed, raising the possibility that examination information for up to approximately 980,000 people (approximately 1.97 million records) may have been leaked.
From the news release
Details of the leak, etc.
Those affected are people who took the online examinations in Bookkeeping, Retail Marketing (Sales Specialist), JCCI PC, Electronic Accounting Practice, Key Touch 2000, Business Skill Board, JCCI Programming, and JCCI Business English between April 1, 2022, and November 4, 2026.
There is a possibility that names, phonetic spellings of names, gender, dates of birth, pass/fail results, examination scores, and optionally entered email addresses, telephone numbers, and addresses were leaked. Information used for payments, such as credit card information, was not included.
The system affected was the system used by the online examination administrator to manage examination reservations and results.
Unauthorized access was confirmed on November 4 through a report from the system management company. It was found that a malicious program had been installed on November 1. The file was deleted immediately, and measures were taken to address the vulnerability by applying patches. As the investigation proceeded, the possibility of a leak was discovered on November 9.
Measures to address the vulnerability have already been completed, and the online examinations can be taken as usual.