> JapanHacked_
[Resolved][Severity: Moderate][Credential abuse]

Fukuchiyama City: one mail account of its fire department was accessed without authorization, and a flood of spam delayed the department's outgoing mail

From January 13 to 14, a fire department mail account was abused and a flood of spam queued up, delaying the department's outgoing mail.

Disclosed

2021-01-15

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. From this day until the 14th, one mail account the fire department uses was accessed without authorization, and spam may have been sent from it. [1] [2]

  2. A large number of messages queued up and delayed mail sent from the fire department. The city stopped the account so that no more spam could be sent. [1] [2]

  3. The city disclosed the case. [1] [2]

Impact and response

The city asked people to delete, unopened, mail received from the address postmaster@city.fukuchiyama.kyoto.jp on January 13 and 14. [1] [2]

Timeline

  1. Started 2021-01-13
  2. Disclosed 2021-01-15
  3. 2 days

Attack or cause

Method
[Credential abuse]
Impact
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]不正アクセスにより消防本部が管理するメール配信に遅延が生じた事象についてFukuchiyama City · 2021-01-15
  2. [2][News]消防本部が迷惑メールの踏み台に、メール遅延発生ScanNetSecurity · 2021-01-18 09:00