Applabo: unauthorized access to its mail server

On 11 October, Applabo, an IT company in Osaka, found that the database admin password of the mail server it runs had been cracked from outside and used to get in. The cause was a configuration flaw: admin access had not been restricted. Email addresses and some of the encrypted passwords may have been viewed. It limited admin access to its own network, blocked connections from overseas and anonymizing networks, and asked users to change their passwords.