On August 20, 2025, the Japan International Expo Association announced a potential data breach involving unauthorized access to a Microsoft 365 account used by a subcontractor. This breach may have exposed personal information of stakeholders and event participants related to the Osaka-Kansai Expo, although no general visitor data has been confirmed as compromised.
The incident began on May 13 when an employee of the subcontractor received a phishing email disguised as communication from a foreign company, leading to unauthorized access. The subcontractor promptly blocked access on the same day. The data potentially affected includes names, affiliations, email addresses, and other personal details of employees and event participants, but credit card information has not been confirmed as compromised.
As of August 20, there have been no reports of secondary damages from the unauthorized access. However, the Expo Association has warned about the possibility of phishing attempts impersonating the organization and urged stakeholders to verify any unexpected communications. The association is reviewing security measures and information management protocols with its subcontractors.
Editor's Note
The unauthorized access incident highlights the critical importance of cybersecurity in large-scale events like the Osaka-Kansai Expo. As organizations increasingly rely on digital platforms for communication and data management, the risk of data breaches through phishing attacks remains a significant concern. Stakeholders must prioritize robust security measures to protect sensitive information and maintain trust.
Leave a comment