> JapanHacked_
[Resolved][Severity: Moderate][Credential abuse]

Shizuoka City: one mail account of Shizuoka Municipal Hospital was accessed without authorization and sent a flood of spam

A hospital mail account sent a flood of spam from the night of January 13 to the morning of the 14th. The mail system is separate from the medical information system.

Disclosed

2021-01-19

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. From around this time, one hospital mail account was accessed without authorization and began sending a flood of spam. [1]

  2. By around this time the spam had stopped. The hospital had suspended the account. [1]

Impact

The hospital said no patient information leaked because its mail system is not connected to the medical information system. [1]

Timeline

  1. Started 2021-01-13
  2. Disclosed 2021-01-19
  3. 6 days

Attack or cause

Method
[Credential abuse]
Impact
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]メールアカウントに不正アクセス、スパム踏み台に - 静岡病院Security NEXT · 2021-01-19