We hereby announce that unauthorized access to a Microsoft 365 account has been confirmed at TEIKOKU SOUTH ASIA PTE LTD. (Address: 1A International Business Park, #11-01 Singapore 609933, hereinafter "TSA"), our sales subsidiary in Singapore.
Please refer to the following for details on the circumstances and the impact identified to date.
We will promptly disclose any new information, including additional facts or impacts, as it becomes available.
We sincerely apologize for the concern this has caused to our business partners and related parties.
１．Background
On Friday, April 24, we initiated an investigation following a surge in reports of suspicious emails detected by our internet security system.
On the same day, we confirmed that a legitimate Microsoft 365 account of one TSA employee had been accessed by an unauthorized third party.
On the same day, we performed forced logout of all sessions and password changes for the compromised account as well as all other accounts.
２．Impact Identified to Date
We have confirmed that spam emails were sent from the compromised account to TSA's business partners. Additionally, there is a possibility that emails addressed to the account may have been viewed by a third party; however, no downloads have been confirmed.
We have sent alerts to all recipients of the spam emails, and no damages have been confirmed at this time.
Furthermore, no virus infections or similar issues have been confirmed in our internal systems, and we believe there is no impact on our group's business operations.
We are currently conducting an investigation into the impact of this unauthorized access and reviewing measures to prevent recurrence with the support of external experts.
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Notice: This document is an excerpt translation of the original Japanese document and is only for reference purposes.
In the event of any discrepancy between this translated document and the original Japanese document, the latter shall prevail.
Please refer to the following for details on the circumstances and the impact identified to date.
We will promptly disclose any new information, including additional facts or impacts, as it becomes available.
We sincerely apologize for the concern this has caused to our business partners and related parties.
１．Background
On Friday, April 24, we initiated an investigation following a surge in reports of suspicious emails detected by our internet security system.
On the same day, we confirmed that a legitimate Microsoft 365 account of one TSA employee had been accessed by an unauthorized third party.
On the same day, we performed forced logout of all sessions and password changes for the compromised account as well as all other accounts.
２．Impact Identified to Date
We have confirmed that spam emails were sent from the compromised account to TSA's business partners. Additionally, there is a possibility that emails addressed to the account may have been viewed by a third party; however, no downloads have been confirmed.
We have sent alerts to all recipients of the spam emails, and no damages have been confirmed at this time.
Furthermore, no virus infections or similar issues have been confirmed in our internal systems, and we believe there is no impact on our group's business operations.
We are currently conducting an investigation into the impact of this unauthorized access and reviewing measures to prevent recurrence with the support of external experts.
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Notice: This document is an excerpt translation of the original Japanese document and is only for reference purposes.
In the event of any discrepancy between this translated document and the original Japanese document, the latter shall prevail.