Miyoshi Town Council of Social Welfare: a hijacked mail account sent large numbers of English scam emails
Someone logged into the council's mail account and sent large numbers of English scam emails asking for money.
Disclosed
2020-04-27
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
From about this time, thousands of bounce notices arrived for mail the council had not sent. An investigation found scam emails sent from the hijacked account. [1]
The password was changed, and changed again regularly afterwards, but scam emails may have gone out several more times. [1]
The council warned on its website to delete suspicious mail and consulted the police. [1]
It published the details. No data leak or payments by recipients had been found. [1]
Timeline
- Started, Detected 2020-04-24
- Disclosed 2020-04-27
- 3 days
Attack or cause
- Method
- [Credential abuse]
- Impact
- Entry point
- Unknown
Data exposed or at risk
–
Organizations involved
[Breached][Moderate]Saitama, MiyoshiMedical care and welfare
Miyoshi Town Council of Social Welfare
Sources
- [1][News]メールアカウントが詐欺メールの踏み台に、エラー通知メールで発覚(三芳町社会福祉協議会)ScanNetSecurity · 2020-05-11 08:00
- [2][News]不正アクセスでスパム踏み台に - 三芳町社会福祉協議会Security NEXT · 2020-05-08