Arcadia disaster alert server breach used to send 1.42 million phishing emails
A server belonging to Arcadia, which operates disaster alert services for Japanese local authorities, was compromised and used to send over 1.42 million phishing emails. Up to approximately 3.136 million email addresses may have been exposed, and further intrusions using stolen API accounts and other means were also confirmed. Arcadia submitted evidence of the damage to Osaka police, who launched an investigation and began analysing communication logs from the start of the attack.
Key facts
- Affected organisation
- Arcadia
- Incident type
- Phishing & smishing
- Occurred / detected
- Not confirmed
- Scale of damage
- Over 1.42 million phishing emails sent; up to approximately 3.136 million email addresses potentially exposed
- Cause / method
- Compromise of the disaster alert server and further intrusions using stolen API accounts and other means
- Location
- Japan
If your data was exposed
Exposed dataEmail
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- Arcadia submitted evidence of the damage to Osaka police, who launched an investigation into suspected violations of the Act on Prohibition of Unauthorised Computer Access.
- It emerged that over 1.42 million phishing emails had been sent and that up to approximately 3.136 million email addresses may have been exposed.
- Arcadia's president said artificial intelligence had been used in the attack and announced plans to disclose details of the unauthorised access.
4 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.