> JapanHacked_
[Resolved][Severity: Moderate][Credential abuse]

Isejin Honsha: an intruder used one of its mail accounts to send spam

One mail account of the hotel operator was taken over late on July 10 and used to send unwanted mail to many addresses.

Disclosed

2020-07-14

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. Late at night, one mail account was accessed without permission and used to send unwanted mail. [1]

  2. Public disclosure; recipients were asked to delete the mail without opening it. [1]

Impact and response

Checks with an outside firm found no sign of data being taken or of customer data leaking. The account password was changed. [1]

Timeline

  1. Started, Detected 2020-07-10
  2. Disclosed 2020-07-14
  3. 4 days

Attack or cause

Method
[Credential abuse]
Impact
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]メルアカに不正アクセス、迷惑メールの踏み台に - ホテル運営会社Security NEXT · 2020-07-16