Resumen
A subset of 92,273 records also contained delivery-related information whose details remain under investigation. Do not add this subset to the total. The count is email-address records, not people or game accounts. SEGA Account addresses, names, addresses, phone numbers, card details and login passwords were excluded. A separate arcade-network incident is not merged into this record.
Cronología
- Ocurrencia
- Descubrimiento
- Divulgación
Arara published its initial vendor-incident notice; this is distinct from SEGA’s victim-specific disclosure.
SEGA received Arara’s notification confirming exposure of the affected addresses.
SEGA disclosed the impact and count affecting its newsletters.
Respuesta de la organización
SEGA suspended newsletters using the affected system pending safety checks and continued investigating with Arara. Joint regulatory reporting and individual notices after scope clarification were planned.
Qué puedes hacer
Beware of messages impersonating SEGA, SEGA FAVE or Arara. Avoid suspicious links and attachments and do not provide passwords or card details.
Fuentes
- アララメッセージへの不正アクセスに関するお詫びと今後の対応についてアララ株式会社 · 2026-11-09
- 業務委託企業への不正アクセスによる個人情報流出に関するお詫びとお知らせ株式会社セガ · 2026-11-09
- アララメッセージへの不正アクセスによる情報流出およびサービス停止についてアララ株式会社 · 2026-11-09