INPIT: a support worker's personal PC at its contractor was infected with Emotet, and names and email addresses of 316 contacts may have leaked

1. 2020-10-20

   At the Hokkaido Institute of Invention and Innovation, an email from a supported company was opened and the PC was infected with Emotet that night. [2]

2. 2020-10-21

   Emails impersonating the IP support desk and its staff went out, and recipients pointed out the problem. The desk issued a warning. [1] [2]

3. 2020-10-22

   The investigation found that one personal PC used without permission by a contractor employee was infected, and it was cut off from the network. [2]

4. 2021-03-03

   INPIT published the results of the detailed investigation. [1]

Names, email addresses and other data of people at 316 supported companies and others that the worker had exchanged email with may have leaked. No sensitive business information was included. [1] [2]

INPIT apologized to the companies concerned several times and checked the situation; no damage was reported. [1]