Malicious program planted on Japan Chamber of Commerce online exam system; data of up to ~980,000 bookkeeping and other test takers may be exposed

The Japan Chamber of Commerce and Industry (JCCI) announced on Nov 10 that the external exam management server used for its online tests was accessed without authorization, and data of up to about 980,000 examinees (about 1.97 million records) may have leaked ^[1]. The data covers test takers of eight online exams including bookkeeping from April 2022 to Nov 4, 2026, including names, gender, birth dates, pass/fail results and scores, plus optional email, phone and address, but no payment data ^[1][2]. JCCI says a malicious program was planted on Nov 1, the file was removed and a patch applied, and no misuse has been confirmed ^[1][2].

Industries mainly affected: Education, Professional services

JCCI says a malicious program was planted on Nov 1, the file was removed and a patch applied, and no misuse has been confirmed ^[1]