> JapanHacked_
[Resolved][Severity: Moderate][Intrusion][Malware]

Nippon Express: 16 PCs saw unauthorized logins and one was infected with a virus, and mail on two was viewed, but no trace of a leak was found

Mail was viewed through unauthorized access to PCs. The final report found unauthorized logins on 16 PCs and no trace of a leak.

Disclosed

2021-03-01

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. The company confirmed a malware infection on a PC. [3]

  2. It confirmed that mail on two PCs had been viewed and that some data may have leaked. [1] [4]

  3. The company announced the case. It had identified the affected devices, confirmed one infected PC and finished initial steps to limit the damage. [1] [4]

  4. The company published its final report. [2]

Impact

An outside specialist examined the 16 PCs with unauthorized logins. Only one was infected, and no spread inside or outside the company was found. [2]

The unauthorized access was confirmed, but no leak of data, including personal data, was confirmed. No one reported receiving email that impersonated employees. [2]

Timeline

  1. Detected 2021-02-06
  2. Disclosed 2021-03-01
  3. 23 days

Attack or cause

Method
[Intrusion][Malware]
Impact
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]当社パソコンへの不正アクセスによる情報流出の可能性についてNippon Express · 2021-03-01
  2. [2][Official]当社パソコンへの不正アクセスによる情報流出の可能性について(最終報)Nippon Express · 2021-03-23
  3. [3][News]PC2台に不正アクセス、マルウェア感染も - 日本通運Security NEXT · 2021-03-02
  4. [4][News]日本通運のパソコン2台に不正アクセス、メール閲覧とウイルス感染被害ScanNetSecurity · 2021-03-04 08:00