SHINDO2

ZUU Co., Ltd.

Business email fraudSize not disclosed

NO LEAK FOUNDClosed (final report)

Open in the live monitor ▶
Disclosed
Mar 27, 2026
Leak
No leak
Type
Business email fraud
Status
Closed (final report)
Security spend
Not checked yet
Compensation
Not announced

Who is affected

  • Employee who received the transfer instruction

Cause

A third party posing as a company executive on business chat issued a fraudulent transfer instruction

Timeline

  1. A third party posing as a company executive on business chat ordered a transfer, which was made the same day
  2. Announced a special loss

Response

  • Forensic investigation

Asked the banks to reverse the transfer, reported to the local police station and engaged outside specialists

What you should do

  1. Expect targeted phishing posing as HR or interview contacts
  2. Check the company's notice to see if you're affected

Lessons for companies

  1. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  2. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources