Kanazawa Kogyo: contact form abused to send spam; automatic replies stopped
Its contact form was abused for spam around 2–5 November. Automatic replies were stopped on the 5th. Server intrusion and personal-data exposure are unconfirmed.
Disclosed
2026-11-09
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
Contact-form abuse
From around 2 to 5 November a third party abused the contact form to send inquiry-acknowledgement emails using the company as sender. It stopped automatic replies and took preventive measures on the 5th; confirmation messages remain disabled at publication. No server intrusion or personal-data leak is confirmed. Message/recipient counts and the precise technique are undisclosed. [1]
Timeline
- Started 2026-11-02
- Disclosed 2026-11-09
- 7 days
Attack or cause
- Method
- [Unknown]
- Impact
- [Service outage]
- Entry point
- Web app
Data exposed or at risk
–
Organizations involved
[Breached][Moderate]Nagano, NaganoConstruction
Kanazawa Kogyo Co., Ltd.
Sources
- [1][Official]お問い合わせフォームを悪用した迷惑メールについて(お詫び)Kanazawa Kogyo · 2026-11-09