Japan Association for the 2025 World Exposition: one hijacked mail account sent about 63,000 phishing mails abroad

A mail account was hijacked on October 7 and 8 and sent phishing mail to addresses abroad. No leak of personal data was found.

Disclosed

2020-10-16

Organizations involved

Leaked or at risk

Unknown

Downtime

Unknown

What happened

2020-10-07
From this day to the next, one of the association's mail accounts was accessed without permission and sent about 63,000 phishing mails to addresses abroad. Staff noticed and changed the password. [1]

As of October 13, no leak of personal data or access to the inbox had been found. An outside firm was looking into how it happened. [1]

–

						Note
Japan Association for the 2025 World Exposition	[Breached]	[Moderate]	Osaka, Osaka, Suminoe	Other services	Unknown