Japan disaster alert service hijacked to send 1.42M phishing emails
Attackers took over a disaster-alert service used by 875 Japanese public bodies and sent 1.42 million phishing emails from it. Operator Arcadia says 3.1 million email addresses may have leaked and Osaka police are investigating. Arcadia's CEO called the attack "not humanly possible" and suspects AI was used.
What happened
Attackers took over a disaster-alert service used by 875 Japanese public bodies and sent 1.42 million phishing emails in the platform's name. Operator Arcadia says 3.1 million email addresses may have leaked. Osaka police are investigating.
Why it matters
Disaster-alert emails carry high trust, so recipients may have clicked malicious links and handed over credentials or personal data. The potential leak of 3.1 million addresses fuels follow-up targeted campaigns. Public bodies also lose trust in a channel meant for emergencies.
What to do
Warn staff and citizens about phishing emails sent through the service and tell them not to click links. Monitor for phishing that cites disaster alerts and tighten access controls on the platform. Track the Osaka police investigation and Arcadia communications.
For the technical team
- Affected
- Serviço de alerta de desastres operado pela Arcadia e usado por 875 órgãos públicos no Japão · Disaster-alert service operated by Arcadia and used by 875 Japanese public bodies.
- Exploitation
- Incident reported by operator Arcadia, with 1.42 million phishing emails sent and 3.1 million addresses possibly leaked. Osaka police are investigating.
- Fix
- Not applicable to a breach incident; the source cites no fix or mitigation.
- Vector
- Hijack of the disaster-alert service operated by Arcadia; the compromised platform was used to send 1.42 million phishing emails. The intrusion method is not described in the source.
- More details
- Source is IntCyberDigest's report. Osaka police are investigating. Arcadia's CEO said the attack is "not humanly possible" and suspects AI; the source gives no technical evidence for that suspicion.
Timeline
First report: hijacked service sent 1.42 million phishing emails and 3.1 million addresses may have leaked.
Sources 1 source
- @IntCyberDigest @IntCyberDigest
