East Japan Mitsubishi Motor Sales: unauthorized login to an employee's Microsoft 365 account sent 825 spoofed emails

1. 2026-10-13

   The company disclosed that a third party had logged in to an employee's Microsoft 365 account and sent 825 spoofed emails. [1]

The email addresses and names of the recipients leaked, and the attacker may have been able to read past emails. The number of people affected is still being checked. [1]

All employees' passwords were changed, and there have been no further unauthorized logins. Recipients were contacted one by one and asked to delete the emails. Reported to the Personal Information Protection Commission. [1]