已确认

Blastmail breach: all subscriber-account data and some delivery lists taken

Unauthorised access at subsidiary RAKUS Light Cloud’s Blastmail led to removal of all customer-account records including company/contact names, contacts and contract/payment histories; some delivery lists were also leaked.

最后更新: 2026-11-09

此内容以 English 显示。

概述

The service was suspended at 00:30 JST on October 21 and exfiltration confirmed the same day. Intrusion into two API servers and database access were confirmed; the entry route remained under investigation. No total count is published, and customer-level counts such as 2rinkan’s are not added. Card numbers were not held.

时间线

未知发生
2026-10-21发现
2026-10-21披露
2026-10-21
Suspicious access detected, service suspended and exfiltration confirmed.
2026-10-28
Update: no impact identified on other services.

组织应对措施

The company suspended the service, investigated, checked system safety and is contacting affected customers. On October 28 it added that no impact on other group services had been identified.

用户应对建议

Verify notices through official channels, avoid links or attachments in unexpected messages, and do not provide credentials or account details.

信息来源

ブラストメール第1報ラクス · 2026-11-09
ブラストメール第2報（10月28日追記）ラクス · 2026-11-09