> JapanHacked_
[Contained][Severity: Critical][Phishing]

ZUU: a third party posing as an officer or employee gave a false transfer instruction in business chat and 96 million yen was sent to an outside account

At ZUU, a third party posing as an officer or employee gave a false transfer instruction in business chat, and it sent 96 million yen to an outside account under its usual process.

Disclosed

2026-03-27

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. In the business chat it uses, a third party posing as an officer or employee gave a false transfer instruction, and it sent the money to an outside account following its usual rules and process. [1] [2]

  2. Doubts arose about whether the instruction was genuine; after checking the facts it judged a third party's fraud to be likely and announced the outflow of funds. [1] [2]

Timeline

  1. Started 2026-03-19
  2. Detected, Disclosed 2026-03-27
  3. 8 days

Attack or cause

Method
[Phishing]
Impact
[Fraud][Financial loss]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

  • [Breached][Critical]Tokyo, MinatoInformation and communications

    ZUU Co., Ltd.

    It followed a false transfer instruction in business chat and sent money to an outside account.

Open in organization search

Sources

  1. [1][Official]資金流出事案の発生に関するお知らせZUU Co., Ltd. · 2026-03-27
  2. [2][News]ビジネスチャット上で役職員を装った第三者による不正な送金指示、従来のルールに則り 9,600万円を振込ScanNetSecurity · 2026-04-14 08:05