SHINDO2

Nippon Yusen Kabushiki Kaisha

Unauthorized accessSize not disclosed

POSSIBLE LEAKPhone number / Full nameContained

Open in the live monitor ▶
Disclosed
Apr 9, 2026
Detected
Mar 24, 2026
Detection to disclosure
16 days
Leak
Leak possible
Type
Unauthorized access
Status
Contained
Security spend
Not checked yet
Compensation
Not announced

What leaked

IdentityFull name
Employment & HRCompany affiliation
ContactPhone number, Email address

Who is affected

  • Officers and employees
  • Retired employees
  • Employees of business partners

Cause

Unauthorized third-party access to the vessel fuel procurement system

Timeline

  1. Unauthorized access discovered
  2. System restored
  3. Reported to the relevant authorities
  4. First disclosure

Response

  • Blocked the entry point
  • Governance / committee

Isolated the system from the network, set up an internal response team, restored the system and reported to the relevant authorities

What you should do

  1. Don't open links in emails from this company. The apology email itself may be fake
  2. Treat refund or apology calls and texts as scams. Call back only on the number from the official site
  3. Expect targeted phishing posing as HR or interview contacts
  4. Check the company's notice to see if you're affected

Lessons for companies

  1. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  2. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources