Expo 2025 Osaka, Kansai, Japan: unauthorized access to a subcontractor's Microsoft 365 account

On 20 August, the Japan Association for the 2025 World Exposition said a subcontractor for event work was accessed by a third party, and emails and attachments with personal data of Expo staff and event performers may have leaked. After an employee of the subcontractor received a phishing email posing as a foreign company on 13 May, its Microsoft 365 account was accessed; the access was cut off the same day. Names, affiliations, titles, emails and phone numbers of senders and recipients, staff shift schedules, and performers' names, titles, photos and speech drafts were included. No data of general visitors was found. The subcontractor was not named.