調查中

Monteroza: newsletter member data may have leaked via Arara breach (625,429 email addresses)

Monteroza learned on November 2 that newsletter members' personal data may have leaked through unauthorised access to its vendor Arara's servers.

最後更新: 2026-11-09

此內容以 English 顯示。

概述

The vendor reported 625,429 email addresses, of which 31,333 include optional birth date, gender, prefecture and similar fields (a subset). The cause was given as a web-server vulnerability in the vendor environment. Per the company, this stems from unauthorised access to the Arara email-delivery platform (recorded separately); this figure is a subset of the vendor scope and must not be added to it.

時間軸

不明發生
不明發現
2026-11-04公布

組織應對措施

Suspended newsletter sign-ups and delivery.

使用者應對建議

Be wary of emails, SMS or calls impersonating the organisation; do not open links or attachments or enter passwords or card details. Change reused passwords on other services.

資訊來源

委託先のメール配信サービスへの不正アクセスによる個人情報漏えいに関するお詫びとご報告株式会社モンテローザ · 2026-11-09