SEGA newsletter breach exposes 2.2 million email addresses
Original title: SEGA newsletter data breach exposes 2.2 million email addresses
ARARA's email service leaked 77 million addresses from about 380 clients; attackers sent over 7 million impersonation emails.
SEGA said a breach at newsletter provider ARARA exposed email addresses of 2.2 million subscribers across 11 SEGA and SEGA Fave newsletters, plus 92,300 records whose extra fields are still being identified. Names, birth dates, addresses, phone numbers, card data and passwords were not in the compromised set, and SEGA Account addresses were unaffected. ARARA, which disclosed the incident on November 2, said a web server vulnerability and environment problems contributed, but the intrusion method is still under investigation. SEGA reports no confirmed misuse and says a separate ALL.Net and Aime outage is unrelated.
Unconfirmed: SEGA has no confirmed evidence of misuse; the extra fields in 92,300 records and the intrusion method remain undetermined.
- ARARA first told SEGA on October 29 that no data was compromised.
- ARARA notified SEGA of exposure on November 3 and shared details from November 5 to 8.
- Attackers used the service to send over 7 million credit-card impersonation emails in late October.
- Other exposed counts include MOS Burger at 7.5 million and Shochiku at 3.3 million.
- SEGA Fave arcade network services remain offline after a separate incident disclosed November 2.
Impact: Newsletter email addresses exposed; some extra fields still unknown
| Product | Affected |
|---|---|
| ARARA email distribution service | — |
- 1.Watch for credit-card impersonation emails tied to the ARARA incident.
- ATT&CK
- T1566 Phishing
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | all.net | ns, disclosed unauthorized access to servers supporting its ALL.Net and Aime arcade gaming network services. In response, it su |
From the original article
2 min read at bleepingcomputer.com
Japanese gaming giant SEGA has disclosed that a data breach at its third-party newsletter provider, ARARA, exposed the email addresses of 2. 2 million newsletter subscribers. [...]
By Bill Toulas · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.