ZUU: a third party posing as an officer or employee gave a false transfer instruction in business chat and 96 million yen was sent to an outside account
At ZUU, a third party posing as an officer or employee gave a false transfer instruction in business chat, and it sent 96 million yen to an outside account under its usual process.
Disclosed
2026-03-27
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
In the business chat it uses, a third party posing as an officer or employee gave a false transfer instruction, and it sent the money to an outside account following its usual rules and process. [1] [2]
Doubts arose about whether the instruction was genuine; after checking the facts it judged a third party's fraud to be likely and announced the outflow of funds. [1] [2]
Timeline
- Started 2026-03-19
- Detected, Disclosed 2026-03-27
- 8 days
Attack or cause
- Method
- [Phishing]
- Impact
- [Fraud][Financial loss]
- Entry point
- Unknown
Data exposed or at risk
–
Organizations involved
[Breached][Critical]Tokyo, MinatoInformation and communications
ZUU Co., Ltd.It followed a false transfer instruction in business chat and sent money to an outside account.
Sources
- [1][Official]資金流出事案の発生に関するお知らせZUU Co., Ltd. · 2026-03-27
- [2][News]ビジネスチャット上で役職員を装った第三者による不正な送金指示、従来のルールに則り 9,600万円を振込ScanNetSecurity · 2026-04-14 08:05