Fuentes primero · Las cifras corresponden a esta base de datos, no al total mundial.
Aioi Nissay Dowa detected unauthorised access to its policyholder portal on the night of November 2, suspended related services on the 3rd, posted a notice on November 4, and announced a confirmed leak on November 6.
Monteroza learned on November 2 that newsletter members' personal data may have leaked through unauthorised access to its vendor Arara's servers.
Dentsu Soken announced on November 4 that a misconfigured access permission in a client environment of its FACERE service allowed unauthorised access on September 10, 2026, and personal data may have leaked.
Workman was told that unauthorised access to Arara, which it uses for newsletters, leaked email addresses of Workman Online Store newsletter subscribers.
Seijo Ishii said Seijo Ishii.com newsletter members' email addresses leaked in the Arara server intrusion.
Camel Coffee was told on November 2, 2026 that unauthorised access to Arara, used via an external marketing service for its online-store newsletter, leaked subscribers' email addresses.
On July 27, 2026, an employee inadvertently provided California’s EDD with a file containing names and SSNs of current and other personnel.
Possible data leak: On October 30, 2026, Denny's Japan found that during the old-to-new app migration third parties had fraudulently created credentials and could access some accounts; it announced this on November 3.
An attack on email-service provider Arara exposed 15,821,184 Asoview member records. This is a record count and must not be added to the provider-wide total as a separate population.
The incident affected CBcloud’s PickGo delivery service.
Kinko's Japan announced on November 2 that unauthorised access to Arara Message, used for smart-membership newsletters, leaked member email addresses.
Life Corporation confirmed unauthorised access to its official app on October 30, 2026, and announced on November 2 that some point-card data may have been viewed.
ManpowerGroup Japan announced on November 2 (updated November 5) that unauthorised access to Arara's repica service, used by its email contractor, leaked email addresses of registered temporary workers and others.
Subway Japan first said on October 29 its customers were not affected, disclosed a possible leak on November 2, and confirmed it on November 5.
Fukui Shimbun announced on November 2 that unauthorised access to Arara, used for Fukui Shimbun Passport member email, leaked some members' email addresses.
An intruder downloaded files containing personal information.
Hokuriku Electric said unauthorised access to the email service used by the operator it contracts for Hokulink member emails leaked members' email addresses.
Marui Group announced on November 2 that Securitize Japan, which manages its digital bonds, was breached on October 29, 2026, and some applicant personal data leaked.
The bank learned on November 2 that customer email addresses leaked in the repica breach and announced it that day.
Odakyu Travel was told on November 2 that some member email addresses leaked through the Arara service used via a marketing tool.