> JapanHacked_
[Resolved][Severity: Moderate][Credential abuse]

Itabashi Medical Association: two mail accounts were accessed without authorization and sent a flood of spam

On January 22, two of the association's mail accounts were used as a stepping stone for spam. It suspended them and asked recipients to delete the mail unopened.

Disclosed

2021-01-28

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

On January 22, two mail accounts the association uses were accessed without authorization and sent a large amount of spam. The association suspended the accounts. [1]

It asked anyone who received spam from its accounts to delete the whole message without opening links or attachments. [1]

Timeline

  1. Started 2021-01-22
  2. Disclosed 2021-01-28
  3. 6 days

Attack or cause

Method
[Credential abuse]
Impact
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]メールアカウント2件に不正アクセス - 板橋区医師会Security NEXT · 2021-01-28