> JapanHacked_
[Contained][Severity: Major][Credential abuse]

Ueyakato Landscape: Kyoto's Ohigashisan Hiroba mail account abused for spam; inquirers' data may have leaked

The mail account of the designated manager of Kyoto's Ohigashisan Hiroba park was abused to send mass spam, and data on people who had emailed the park may have leaked.

Disclosed

2026-11-02

Organizations involved

2

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. From about 18:00, the credentials of the Ohigashisan Hiroba mail account run by Ueyakato Landscape Co., Ltd. were abused to send mass spam. [1] [2]

  2. At about 06:00 the server company stopped the sending. [1]

  3. At 14:54 the designated manager told Kyoto City that personal data may have leaked. The park published an apology the same day. [1] [2]

Impact

Part of the mail server was accessed, and the email addresses and inquiry contents of people who had emailed the park, stored in the account, may have leaked. [1] [2]

Timeline

  1. Detected 2026-10-30
  2. Disclosed 2026-11-02
  3. 3 days

Attack or cause

Method
[Credential abuse]
Impact
[Data leak]
Entry point
Stolen credentials

Data exposed or at risk

[E-mail address]

Supply chain

Ueyakato Landscape Co., Ltd.

[Breached]

Organizations listed on this site
2

Organizations involved

Open in organization search

Sources

  1. [1][Official]東本願寺前市民緑地のメールアカウントの不正利用及び個人情報漏洩の可能性Kyoto City · 2026-11-04
  2. [2][Official]お東さん広場を装った不審なメール（迷惑メール）に関するお詫びと注意喚起Ohigashisan Hiroba · 2026-11-02