调查中
Monteroza: newsletter member data may have leaked via Arara breach (625,429 email addresses)
Monteroza learned on November 2 that newsletter members' personal data may have leaked through unauthorised access to its vendor Arara's servers.
数据泄露事件
数据泄露事件
注重来源 · 统计仅代表本站数据库，并非全球事件总数。
已确认
Workman: newsletter subscribers' email addresses leaked via Arara breach (up to about 1.45 million)
Workman was told that unauthorised access to Arara, which it uses for newsletters, leaked email addresses of Workman Online Store newsletter subscribers.
已确认
Seijo Ishii: online-shop newsletter email addresses leaked via Arara breach (up to 168,630)
Seijo Ishii said Seijo Ishii.com newsletter members' email addresses leaked in the Arara server intrusion.
已确认
KALDI online store: 820,420 newsletter email addresses leaked via Arara breach
Camel Coffee was told on November 2, 2026 that unauthorised access to Arara, used via an external marketing service for its online-store newsletter, leaked subscribers' email addresses.
已确认
Center Theatre Group: file with SSNs mistakenly sent to state agency
On July 27, 2026, an employee inadvertently provided California’s EDD with a file containing names and SSNs of current and other personnel.
已确认
Asoview discloses 15,821,184 member records exposed through Arara
An attack on email-service provider Arara exposed 15,821,184 Asoview member records. This is a record count and must not be added to the provider-wide total as a separate population.
已确认
7NOW delivery-customer data exposed through contractor
The incident affected CBcloud’s PickGo delivery service.
调查中
Life Corporation: point-card data in the official app may have been viewed after intrusion (298 records)
Life Corporation confirmed unauthorised access to its official app on October 30, 2026, and announced on November 2 that some point-card data may have been viewed.
已确认
Subway Japan: newsletter member data leaked via Arara breach (up to 1,107,494)
Subway Japan first said on October 29 its customers were not affected, disclosed a possible leak on November 2, and confirmed it on November 5.
已确认
Suntory group external-cloud data breach
An intruder downloaded files containing personal information.
已确认
Hokuriku Electric: about 550,000 Hokulink member email addresses leaked via mail-service breach
Hokuriku Electric said unauthorised access to the email service used by the operator it contracts for Hokulink member emails leaked members' email addresses.
已确认
Marui Group: customer data leaked via Securitize Japan digital-bond vendor breach (up to 9,086 people)
Marui Group announced on November 2 that Securitize Japan, which manages its digital bonds, was breached on October 29, 2026, and some applicant personal data leaked.
已确认
Bank of the Ryukyus: 96,477 customer email addresses leaked via Arara repica
The bank learned on November 2 that customer email addresses leaked in the repica breach and announced it that day.
已确认
Odakyu Travel: 63,006 member email addresses leaked via Arara breach
Odakyu Travel was told on November 2 that some member email addresses leaked through the Arara service used via a marketing tool.
已确认
istyle @cosme: data of about 3 million common-ID members leaked after unauthorised access
On October 28, 2026, istyle confirmed that part of its @cosme common-ID member data leaked through unauthorised access.
已确认
Cotton Incorporated: user database export exposed and downloaded
During a CottonWorks.com hosting migration, a user-database export was made public and downloaded four times by unknown parties between September 18 and October 15, 2026.
已确认
ENEOS: car-lease customer data leaked via Prestige Core Solutions vendor breach (up to 8,500 contracts)
ENEOS announced on November 2 that Prestige Core Solutions, which handles part of ENEOS Car Lease administration, was breached on October 29-30, 2026, and customer personal data leaked.
调查中
Skymark: employee and former-employee personal data left viewable; possible leak
After inspecting servers following an earlier careers-form issue, Skymark found some employee and former-employee personal data had been viewable from outside or inside the company and announced a possible leak on November 2.
已确认
U Co-op: 210,495 email addresses leaked from Arara repica service
U Co-op said registered email addresses leaked from Arara's repica email service.
已确认
Prestige International: up to about 5.5 million roadside-service records taken
Customer names, contacts, vehicle, incident/breakdown details and some bank-account information were removed from a roadside-assistance operations system. The figure is up to about 5.5 million records including duplicates.