> JapanHacked_
[Contained][Severity: Moderate][Unknown]

Kanazawa Kogyo: contact form abused to send spam; automatic replies stopped

Its contact form was abused for spam around 2–5 November. Automatic replies were stopped on the 5th. Server intrusion and personal-data exposure are unconfirmed.

Disclosed

2026-11-09

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

Contact-form abuse

From around 2 to 5 November a third party abused the contact form to send inquiry-acknowledgement emails using the company as sender. It stopped automatic replies and took preventive measures on the 5th; confirmation messages remain disabled at publication. No server intrusion or personal-data leak is confirmed. Message/recipient counts and the precise technique are undisclosed. [1]

Timeline

  1. Started 2026-11-02
  2. Disclosed 2026-11-09
  3. 7 days

Attack or cause

Method
[Unknown]
Impact
[Service outage]
Entry point
Web app

Data exposed or at risk

–

Organizations involved

Sources

  1. [1][Official]お問い合わせフォームを悪用した迷惑メールについて(お詫び)Kanazawa Kogyo · 2026-11-09