Overview
Arara path: 13,711 across five clubs. Lotte site: 11,875 emails and 37,070 nicknames (taken October 30). Categories differ and are not summed (count blank). No names, payment or fan-club data. Per the company, this stems from unauthorised access to the Arara email-delivery platform (recorded separately); this figure is a subset of the vendor scope and must not be added to it.
Timeline
- Occurred
- Discovered
- Disclosed
Arara first reported the intrusion.
Files taken from the Lotte site.
Counts for both events published.
Organization response
Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.
What you can do
Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.
Sources
- 不正アクセスによるお客様メールアドレス等流出のお詫びとお知らせパシフィックリーグマーケティング株式会社 · 2026-11-09