Japanese Provider Arara Breached via Mail and Server Systems, Over 81 Million Records Potentially Leaked
Cybersecurity and privacy
PayCloud, parent company of Japanese network provider Arara, announced that its mail delivery service and shared server environments suffered cyberattacks, potentially exposing 81,329,467 customer records across up to 380 corporate clients. Affected entities include Shogakukan, BIC Camera, MOS Burger, and Sumitomo Mitsui. Services have been suspended pending security enhancements and investigation.
PayCloud, parent company of Japanese network services provider Arara, announced that its Arara Message email delivery service and shared server environments were compromised, leading to customer data leaks. Disclosed statistics show both incidents combined potentially compromised 81,329,467 records, affecting up to 380 corporate clients. Among the compromised records, 34,285,087 contained only email addresses, while 47,044,380 contained additional personal details. The company temporarily suspended services and promised to restore them following security enhancements and an intrusion investigation.
Key takeaways
- PayCloud stated the incidents involved web service vulnerabilities and unauthorized access to shared servers, affecting up to 380 corporate clients across 97 servers with 81,329,467 records potentially exposed.
- Publisher Shogakukan disclosed 1,993,665 leaked records containing customer email addresses, birth dates, and nicknames, though credit card details were not included.
- MOS Burger reported approximately 7.52 million member email addresses leaked, while BIC Camera Group announced about 15 million user email addresses were exposed.
- Impacted entities also extended to financial and public sectors, including Sumitomo Mitsui affiliates, Nojima, Rakuten Bank, Kagoshima Bank, and several Japanese local governments.
Source：iThome Read the original ↗
Prepared, checked and automatically published by AI; not individually reviewed by a human. Translation checked by AI.