[Resolved][Severity: Moderate][Intrusion]

Ota Hanaki: its portal site for business partners was tampered with and used to send about 3,500 spam messages

A portal site for business partners was tampered with and used to send about 3,500 messages from the firm's domain to random addresses. No data leak was confirmed.

Disclosed

2021-01-15

Organizations involved

Leaked or at risk

Unknown

Downtime

Unknown

What happened

2021-01-13
The site's management contractor alerted the company to the problem. It took the site down and changed the server passwords. [1]

Impact and response

The trading department's portal site for business partners was tampered with and used as a stepping stone to send spam. About 3,500 messages went to randomly generated addresses. The company said it identified the cause and took measures, and that no leak of information was confirmed. [1]

It asked recipients of mail from its domain not to open URLs or attachments in the message. [1]