> JapanHacked_
[Resolved][Severity: Moderate][Intrusion]

CWS Japan: a mail account unused for about a year was accessed without authorization and used to send English emails with zip attachments to contacts

One mail account was accessed without authorization and about four English emails with zip attachments were sent to contacts; no leak was confirmed.

Disclosed

2021-03-16

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. Outside parties reported receiving suspicious email, and an investigation found that one mail account had been accessed without authorization. [1]

  2. The organization announced the case. It deleted the account, reset passwords, reported the damage to IPA and warned its contacts. [1]

Impact

The account had been unused for about a year. Through the access, about four English emails with zip attachments were sent to contacts. What the files contained is unknown. [1]

The cause is unknown and no leak was confirmed. [1]

Timeline

  1. Detected 2021-03-06
  2. Disclosed 2021-03-16
  3. 10 days

Attack or cause

Method
[Intrusion]
Impact
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]1年間不使用のメールアカウントに不正アクセス - 人道支援団体Security NEXT · 2021-03-16