Osaka Metro Service: the email account of a former employee was accessed without authorization and used to send about 1,000 spam emails

1. 2021-06-04

   From this day through the 5th, one email account was accessed without authorization and about 1,000 spam emails were sent unintentionally. [1] [2]

2. 2021-06-07

   It announced the case. [2]

The bounced spam emails carried English text promoting an investment unrelated to the company's business. The account had been used by a former employee and had not been deleted. Its password appears to have been guessed in some way. Only the outgoing mail server was accessed, no unauthorized access to the receiving server was confirmed, and the company denied that any information leaked. It changed the password and continued monitoring. [1] [2]