SEGA Discloses Leak of Nearly 2.2 Million Customer Emails via Vendor Arara Incident
Cybersecurity and privacy
Japan's SEGA announced that an unauthorized access incident at outsourced email vendor Arara exposed 2,196,044 subscriber emails and 92,273 personal data items across its divisions, part of a breach affecting over 380 organizations.
Japanese gaming company SEGA announced that a cybersecurity incident at its outsourced email delivery provider, Arara, led to the unauthorized exposure of nearly 2.2 million customer email addresses across its gaming production and toy manufacturing division, SEGA FAVE. Arara's email transmission system suffered unauthorized third-party access affecting newsletter subscriber data. Confirmed compromised records include 2,196,044 subscriber email addresses and 92,273 personal data items sent with messages; SEGA stated no names, birthdates, genders, addresses, phone numbers, credit card data, or passwords were leaked. Arara's late-October breach potentially compromised over 81 million records across more than 380 corporate and public entities.
Key takeaways
- SEGA confirmed the leak of 2,196,044 subscriber emails and 92,273 personal data entries due to unauthorized access at email vendor Arara.
- SEGA stated the exposed data excluded names, birthdates, genders, addresses, phone numbers, payment details, and passwords, with investigations continuing.
- The Arara incident potentially compromised over 81 million records in total, impacting more than 380 corporate and public organizations.
Source：iThome Read the original ↗
Prepared, checked and automatically published by AI; not individually reviewed by a human. Translation checked by AI.