Bioengineering Lab: an employee mail account with a weak password was taken over and used to send spam, and about 2,500 received emails may have leaked

1. 2021-02-25

   Around 1:15 a.m., spam quoting emails exchanged with the company was sent from an outside email address. [1] [2]

2. 2021-03-10

   The same kind of spam was sent again from 11:45 p.m. on March 9 to about 12:30 a.m. on March 10. The company announced the case the same day. [1] [2]

The cause is believed to be an easily guessed password. About 2,500 emails and email addresses received between February 16 and 24 and between February 26 and March 2 and kept on the mail server may have leaked. What the emails contained was not disclosed. [1] [2]

The company confirmed there was no intrusion into its internal network and no leak other than email, and changed the passwords of all accounts it manages. [2]