Confirmed

2rinkan reports 489,564 customers’ email addresses exposed through Blastmail

A breach at email provider Blastmail exposed email addresses for 489,564 customers. The November 4 second report no longer qualifies this as the maximum used in the initial notice.

Last updated: 2026-11-09

Overview

The provider is RAKUS Light Cloud. Only newsletter subscribers’ email addresses are identified, separate from the April app and November roadside-assistance incidents. The date in the first-notice URL is not treated as its publication date; October 29 is taken from the official news index.

Timeline

  1. Occurred
  2. Discovered
  3. Disclosed
  4. Initial notice dated in the official news index.

  5. Second report updated the count wording and support channel.

Organization response

The company reported to the privacy regulator, consulted police, prepared individual email notices and opened a dedicated support channel on November 4.

What you can do

Check notices through the organisation’s genuine contact channels. Do not enter credentials or payment details through links in unexpected messages.

Sources

  1. ブラストメール情報漏えい・第2報2りんかんイエローハット · 2026-11-09
  2. 公式お知らせ一覧の10月29日初報掲載日2りんかんイエローハット · 2026-11-09
  3. ブラストメール委託先への不正アクセス・初報2りんかんイエローハット · 2026-11-09

Related information

Share a report

No published information yet

Information appears here after source checks or moderation.

Comments and replies

Write a comment

No account needed. Comments appear immediately.

Do not post private names, addresses, passwords, or codes. Automatic masking is limited; review your content before submitting.