Présentation
Arara first said on October 29 that Workman data was not included, then reported on November 2 that it was. Only email addresses ("up to about 1.45 million") were involved; count left blank. Per the company, this stems from unauthorised access to the Arara email-delivery platform (recorded separately); this figure is a subset of the vendor scope and must not be added to it.
Chronologie
- Survenue
- Découverte
- Divulgation
Réponse de l’organisation
Newsletter delivery was suspended and a regulator report is in progress.
Que faire ?
Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.
Sources
- アララ社の不正アクセスによるワークマンオンラインストアメールマガジン会員様メールアドレスの流出に関するお詫びとお願い株式会社ワークマン · 2026-11-09