Investigating

Expo 2025 Association: subcontractor Microsoft 365 intrusion may have exposed staff/performer data

On May 13, 2026 a subcontractor’s Microsoft 365 account was compromised via phishing and blocked same day. Expo-related mail/attachments may have exposed staff and performer personal data; disclosed Aug 20. General visitors and card data not in scope.

Last updated: 2026-11-09

Overview

No published headcount (blank).

Timeline

  1. Occurred
  2. Discovered
  3. Disclosed

Organization response

Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.

What you can do

Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.

Sources

  1. 再委託先における不正アクセス事案による関係者・イベント出演者に関する個人情報の漏えい等に関するご報告とお詫び公益社団法人2025年日本国際博覧会協会 · 2026-11-09

Related information

Share a report

No published information yet

Information appears here after source checks or moderation.

Comments and replies

Write a comment

No account needed. Comments appear immediately.

Do not post private names, addresses, passwords, or codes. Automatic masking is limited; review your content before submitting.