Odawara Engineering: email account taken over and used for impersonation

From 27 March to 31 August, a third party kept accessing the email account of an Odawara Engineering employee seconded to its German subsidiary and read about 3,500 emails going back to 2018. The traces were found on 31 August. Having read genuine conversations, the attacker impersonated the employee and emailed business partners with payment instructions, and some partners lost money.