Oami (AmiAmi): the Twitter account of its product planning division was hijacked, and direct messages of campaign winners may have been viewed

1. 2021-10-31

   Staff found spam posts and a changed profile on the account of the product planning division. The password and email address had also been changed. They reported it to Twitter. [1]

2. 2021-11-01

   It announced the damage on its official account. [1] [2]

3. 2021-11-03

   It got the account back, but had to change its ID. [1]

4. 2021-11-19

   It published a report on its investigation. [1]

From October 31 to November 3, while the account was hijacked, the DM exchanges with about 200 campaign winners could be viewed. The DMs held names, addresses, phone numbers, Twitter accounts and, for one campaign, email addresses. No leak has been confirmed. It then enabled two-factor authentication on all its accounts. [1]