Osegi
Security·1 min read

Japan Chamber of Commerce: Data of Up to 980,000 Exam Takers at Risk

The Japan Chamber of Commerce and Industry says unauthorized access to its online exam system may have exposed records of up to about 980,000 people, including bookkeeping test takers.

Exam candidate taking a computer-based test at a desk, with a warning icon symbolizing a data breach.
Image: Impress Watch

The Japan Chamber of Commerce and Industry (Nissho) announced on November 10 that unauthorized access to its online exam management system may have leaked information on up to about 980,000 test takers, covering roughly 1.97 million records. Eight types of online exams are affected, including the Nissho bookkeeping certification. So far, the organization has not confirmed that any data was actually leaked or misused.

How the intrusion unfolded

The affected system is an external server used for booking online exams and managing results. A malicious program was planted on it on November 1. The system management company reported the intrusion on November 4, and the same day the malicious file was deleted. A patch addressing the vulnerability was applied late that night.

Further investigation on November 9 showed that test-taker information may have been exposed. The organization reported this to Japan's Personal Information Protection Commission the same day.

What may have been exposed

The data covers people who took an online exam between April 1, 2022 and November 4, 2026. The eight exams are bookkeeping, retail marketing, Nissho PC, electronic accounting practice, Key Touch 2000, business keyboard, Nissho programming and Nissho business English.

Potentially exposed fields are name, furigana reading, gender, date of birth, pass/fail result and score. Email address, phone number and postal address are also included where candidates entered them voluntarily. Credit card and other payment information is not part of the affected data.

What test takers should do

Because a third party may have obtained the data, the organization urges people to be wary of phishing emails, SMS messages, suspicious calls and mail that impersonate the chamber or related bodies. Vulnerability countermeasures are complete, and the online exams can be taken as usual.

Apps worth a look

SUMO: the number puzzle

Tap the right tiles, add them up, hit the target. Easy to learn, hard to master. Free, for all ages.

Tags:data breachjapanchamber of commerceonline examsphishing

More from this day

See all →

More in: Security

See all →