SHINDO3

Odawara Engineering Co., Ltd.

Emails confirmed as viewed~3,500records

LEAK CONFIRMEDMessages / email bodiesAccount takeover · Contained

Open in the live monitor ▶
Disclosed
Sep 15, 2026
Detected
Aug 31, 2026
Detection to disclosure
15 days
Leak
Leak confirmed
Type
Account takeover
Status
Contained
Security spend
Not checked yet
Compensation
Not announced

What leaked

Communications & contentEmails
UnspecifiedBusiness partners' personal data

How many

  • Emails confirmed as viewed ~3,500 records

Who is affected

  • Business partners

Cause

Continuous unauthorized access to the email account of an employee at the German subsidiary; some business partners suffered financial losses

Timeline

  1. Intrusion began
  2. Intrusion stopped
  3. Detected
  4. First disclosure

Response

  • Password reset
  • Revoked credentials
  • MFA

Changed passwords, forced logout of all sessions and made multi-factor authentication mandatory for external access

What you should do

  1. Check the company's notice to see if you're affected

Lessons for companies

  1. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  2. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources