SHINDO2

Japan Accreditation Board

Account takeoverSize not disclosed

LEAK UNCLEARContained

Open in the live monitor ▶
Disclosed
Jul 31, 2026
Leak
Unknown
Type
Account takeover
Status
Contained
Security spend
Not checked yet
Compensation
Not announced

Who is affected

  • Recipients of the suspicious emails

Cause

Unauthorized third-party access to a staff email account

Timeline

  1. A staff mailbox was taken over and spam emails with a Chinese-language subject meaning document review were sent
  2. First disclosure

Response

  • Notified individuals
  • Phishing warning

Individual apologies and warnings to recipients, public notice on the website, stronger security and recurrence prevention

What you should do

  1. You can be affected without ever using this service (parcel recipients etc.). Check any notice you receive
  2. Check the company's notice to see if you're affected

Lessons for companies

  1. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  2. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources