Lawson announced on October 1 that its email server was illicitly accessed by a third party, resulting in the transmission of English emails from the afternoon of September 25 to the evening of September 27. Approximately 700,000 emails were sent.
The subject lines of these emails were either "Mutual Benefit" or "RE," and their content involved soliciting money, requesting contact via email, or asking for personal information. While the majority of recipients were overseas addresses, some domestic transmissions were also confirmed.
According to Lawson, there has been no confirmation of personal information leaks, data center intrusions, data tampering, or malware infections as a result of this unauthorized activity. On September 27, the company implemented changes to server settings and communication restrictions, and is currently investigating the root cause and developing permanent countermeasures.
Lawson advises anyone who receives an unsolicited English email not to reply, click on links, or take any other action, but to delete it immediately. The company notes that the sender's display may have been spoofed, making it difficult to identify the true sender solely by the address.
