Confirmado

Arara Message data exfiltration; roughly 81 million email-address scope includes possible acquisition

Arara confirmed exfiltration through unauthorized access to its email-delivery platform. Its November 6 deduplicated scope of 81,329,467 email addresses also includes addresses that may have been acquired.

Última actualización: 2026-11-09

Este contenido se muestra en English.

Resumen

The figure counts email addresses, not people. A maximum of approximately 380 contracting companies remains under review. Other membership fields vary by customer company. The shared-environment subtotal was corrected to 2,842,400; overlapping categories must not be summed again. A maximum of approximately 7.13 million fraudulent emails sent is a different metric. Do not add this root-event scope to SEGA-specific impacts.

Cronología

  1. Ocurrencia
  2. Descubrimiento
  3. Divulgación
  4. Initial public notice and initial authority reports.

  5. All services were suspended.

  6. Third report and corrected, deduplicated scope published.

Respuesta de la organización

All platform services were suspended on October 31. Arara engaged specialists, contacted customers and notified police and data-protection authorities. Restart depends on safety checks and resetting customer authentication.

Qué puedes hacer

Be alert to impersonation messages. If card details were entered in a fraudulent site, contact the card issuer.

Fuentes

  1. 「アララメッセージ」への不正アクセスに関するお詫びと今後の対応についてアララ株式会社 · 2026-11-09
  2. アララメッセージへの不正アクセスに関するお知らせアララ株式会社 · 2026-11-09

Información relacionada

sega-arara-newsletter-email-breach-2026

Información relacionada

Compartir información

Aún no hay información publicada

La información aparecerá tras verificar fuentes o moderar los avisos.

Comentarios y respuestas

Escribir un comentario

Sin registro. Los comentarios se publican de inmediato.

No publiques nombres privados, direcciones, contraseñas ni códigos. El enmascarado automático tiene límites: revisa antes de enviar.