已確認

Blastmail breach: all subscriber-account data and some delivery lists taken

Unauthorised access at subsidiary RAKUS Light Cloud’s Blastmail led to removal of all customer-account records including company/contact names, contacts and contract/payment histories; some delivery lists were also leaked.

最後更新: 2026-11-09

此內容以 English 顯示。

概述

The service was suspended at 00:30 JST on October 21 and exfiltration confirmed the same day. Intrusion into two API servers and database access were confirmed; the entry route remained under investigation. No total count is published, and customer-level counts such as 2rinkan’s are not added. Card numbers were not held.

時間軸

不明發生
2026-10-21發現
2026-10-21公布
2026-10-21
Suspicious access detected, service suspended and exfiltration confirmed.
2026-10-28
Update: no impact identified on other services.

組織應對措施

The company suspended the service, investigated, checked system safety and is contacting affected customers. On October 28 it added that no impact on other group services had been identified.

使用者應對建議

Verify notices through official channels, avoid links or attachments in unexpected messages, and do not provide credentials or account details.

資訊來源

ブラストメール第1報ラクス · 2026-11-09
ブラストメール第2報（10月28日追記）ラクス · 2026-11-09