Security LabInspect with AI
← Incident database

jst-mail-2026 · Disclosed 2026-08-07

科学技術振興機構: unauthorized access and impact

Unauthorized access affected 12 staff mailboxes; the entry route is undisclosed. The August 28 review revised affected mail to about 18,000 records; about 1,400 external addresses are a subset, replacing the supplied 16,000 figure.

Cause unresolved / undisclosed

Outcome: Confirmed breach

Entry path and evidence

  • Reported fact

    Unauthorized access affected 12 staff mailboxes; the entry route is undisclosed.

    [s1]§§1-3
  • Reported fact

    The August 28 review revised affected mail to about 18,000 records; about 1,400 external addresses are a subset, replacing the supplied 16,000 figure.

    [s1]§§1-3

Timeline

  1. Disclosure date established by the reviewed notice. [s1]

Reported response

  • Reported fact

    The abused route was blocked and access permissions revoked.

    [s1]§§1-3

Cause and mitigation hypotheses

Not assessed. Editorial hypotheses have not been added for this incident; this does not establish safety or a confirmed cause.

Evidence relevant to prevention

Insufficient evidence

Undisclosed entry or patch timing prevents an avoidability assessment. Inspect privileges, retrieval logs, retention and deployed configuration using the linked rules.

Editorial assessment; not a determination of liability. [s1]

Unknowns and AI involvement

AI involvementUnknown

The reviewed disclosures do not establish attacker use of AI.

Email messages and unique contact addresses are different units; the follow-up message total supersedes the initial estimate.

Sources

  1. [s1] 科学技術振興機構 · Primary source

    科学技術振興機構：事故に関する公表資料 ↗

    Reviewed 2026-10-09