已确认

Workman: newsletter subscribers' email addresses leaked via Arara breach (up to about 1.45 million)

Workman was told that unauthorised access to Arara, which it uses for newsletters, leaked email addresses of Workman Online Store newsletter subscribers.

最后更新: 2026-11-09

此内容以 English 显示。

概述

Arara first said on October 29 that Workman data was not included, then reported on November 2 that it was. Only email addresses ("up to about 1.45 million") were involved; count left blank. Per the company, this stems from unauthorised access to the Arara email-delivery platform (recorded separately); this figure is a subset of the vendor scope and must not be added to it.

时间线

未知发生
未知发现
2026-11-04披露

组织应对措施

Newsletter delivery was suspended and a regulator report is in progress.

用户应对建议

Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.

信息来源

アララ社の不正アクセスによるワークマンオンラインストアメールマガジン会員様メールアドレスの流出に関するお詫びとお願い株式会社ワークマン · 2026-11-09