> JapanHacked_
[Resolved][Severity: Moderate][Credential abuse]

Luxottica Japan: after a break-in to a mail account, the OAKLEY Instagram account in Japan was taken over

An intruder got into a mail account the company manages and took over the Japanese OAKLEY Instagram account, which then posted improper content and sent direct messages.

Disclosed

2020-08-03

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. From this day to July 25, the hijacked account made improper posts and sent direct messages. [1]

  2. Public disclosure. The account had been recovered with help from Facebook support, and the company apologized on the account. [1]

Timeline

  1. Started 2020-07-08
  2. Disclosed 2020-08-03
  3. 26 days

Attack or cause

Method
[Credential abuse]
Impact
Entry point
Stolen credentials

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]OAKLEY の Instagram が乗っ取り被害(ルックスオティカジャパン)ScanNetSecurity · 2020-08-05 08:00