TOKAI Communications: unauthorized access to OneOffice Mail Solution

TOKAI detected suspected intrusion in its business email service on December 3 and disclosed it December 19. Initial possible exposure included up to 3,569,937 quarantined messages. Its January 23, 2026 completed investigation concluded that a previously unknown Cisco-device vulnerability had caused leakage of 1,931,902 quarantined messages, 79,991 user email addresses and other entries. It confirmed that LDAP passwords and log-server email headers suspected in the second report had not leaked. The historical maximum counts quarantined messages, not people. Restoration work was still underway at the third report.