> JapanHacked_
[Resolved][Severity: Moderate][Intrusion]

Digital Agency: the mail relay server of "gBizID" was accessed without authorization and about 13,000 spam emails were sent

In 30 minutes on September 24, an unauthorized access from overseas sent about 13,000 spam emails. No leak of personal data is confirmed.

Disclosed

2022-09-26

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. Between 4:30 p.m. and 5:00 p.m. the mail relay server was accessed without authorization and about 13,000 spam emails were sent from the "gbiz-id.go.jp" domain to an unspecified number of recipients. It cut the communication as soon as it detected the anomaly. [1]

  2. It announced the case. The cause is believed to be unauthorized access from overseas. The recipients were not related to gBizID accounts. [1]

Timeline

  1. Detected 2022-09-24
  2. Disclosed 2022-09-26
  3. 2 days

Attack or cause

Method
[Intrusion]
Impact
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]「GビズID」が管理するメール中継サーバーに対する不正アクセスによる迷惑メール送信について｜デジタル庁Digital Agency · 2022-09-26