Ryobi Bus: 43,221 newsletter email addresses leaked via Arara breach
Ryobi Bus announced on November 2 that Arara reported unauthorised access to its repica service, used for newsletters, had leaked member email addresses.
기업명, 국가, 업종, 발생 연도, 공격 방식으로 사건을 검색하고 유출 정보, 피해 규모, 확인 상태, 기업 대응과 출처를 확인하세요.
Ryobi Bus announced on November 2 that Arara reported unauthorised access to its repica service, used for newsletters, had leaked member email addresses.
Fukui Shimbun announced on November 2 that unauthorised access to Arara, used for Fukui Shimbun Passport member email, leaked some members' email addresses.
An intruder downloaded files containing personal information.
Hokuriku Electric said unauthorised access to the email service used by the operator it contracts for Hokulink member emails leaked members' email addresses.
Marui Group announced on November 2 that Securitize Japan, which manages its digital bonds, was breached on October 29, 2026, and some applicant personal data leaked.
The bank learned on November 2 that customer email addresses leaked in the repica breach and announced it that day.
Odakyu Travel was told on November 2 that some member email addresses leaked through the Arara service used via a marketing tool.
On October 28, 2026, istyle confirmed that part of its @cosme common-ID member data leaked through unauthorised access.
Kobe Shimbun was told on November 2 that unauthorised access to Arara, used for its newsletter, leaked recipient email addresses, and published a notice that day.
ENEOS announced on November 2 that Prestige Core Solutions, which handles part of ENEOS Car Lease administration, was breached on October 29-30, 2026, and customer personal data leaked.
After inspecting servers following an earlier careers-form issue, Skymark found some employee and former-employee personal data had been viewable from outside or inside the company and announced a possible leak on November 2.
U Co-op said registered email addresses leaked from Arara's repica email service.
Customer names, contacts, vehicle, incident/breakdown details and some bank-account information were removed from a roadside-assistance operations system. The figure is up to about 5.5 million records including duplicates.
Mizkan announced on November 2 that unauthorised access to Sagawa Express's package-tracking service may have leaked shipping-label data for parcels the Mizkan group or its contractors shipped via Sagawa between June 21 and September 30, 2026.
Tochigi Bank announced on November 2 that part of its email-delivery service ran on Arara servers that were breached, leaking some customer email addresses, and gave the count in a November 3 second report.
Zaif announced a possible leak on November 2 and, in a November 4 second report, confirmed that customer email addresses registered with Arara Message had been exfiltrated.
TKC was informed that unauthorised access to Arara Message, its outsourced email-delivery service, leaked email addresses and names of users of TKC systems.
Fanplus and Ticketplus announced on November 2 that unauthorised access to Arara Message leaked email addresses of their services' users.
On November 1, 2026, Nojima detected unauthorised access to the member-management system of its Nojima Online e-commerce site and confirmed member data of that site and its used-smartphone buy-back site had leaked.
Kagome announced on October 31 that unauthorised access to the digital-securities platform used for its 2023 perk-bearing bonds may have leaked purchaser personal data.