[Resolved][Severity: Moderate][Unknown]

Sapporo City Transportation Bureau: its official Twitter account was accessed without permission and used to post an unrelated game link

In the early hours of December 10 a post unrelated to the bureau invited people to a game through a link. Visiting it may have infected devices with malware.

Disclosed

2020-12-10

Organizations involved

Leaked or at risk

Unknown

Downtime

Unknown

What happened

2020-12-10 04:00
Around this time the official account was accessed without permission and used to post an unrelated message with a URL inviting people to join a certain game. [1]
2020-12-10 09:00
Around this time, when staff checked, the post had already been deleted. [1]

Response

The bureau asked anyone who opened the URL to check their device for malware. The cause is under investigation. It changed the login password and will change it regularly. [1]

Timeline

Disclosed 2020-12-10
1 days

Attack or cause

Method: [Unknown]
Impact: [Fraud]
Entry point: Unknown

Data exposed or at risk

–

Organizations involved

[Breached][Moderate]Hokkaido, SapporoMunicipality
Sapporo City
The official account of the Sapporo City Transportation Bureau, a city department.

						Note
Sapporo City	[Breached]	[Moderate]	Hokkaido, Sapporo	Municipality	Unknown	The official account of the Sapporo City Transportation Bureau, a city department.

Open in organization search

Sources

[1][News]札幌市交通局公式Twitterに不正アクセス - 外部サイトURLなど投稿Security NEXT · 2020-12-11