SEGA Newsletter Data Breach Exposes 2.2 Million Email Addresses via Third-Party Provider ARARA
Japanese gaming giant SEGA has disclosed a data breach at its third-party newsletter provider ARARA that exposed the email addresses of 2.2 million subscribers. The incident also affected 92,300 records containing additional undetermined information across 11 SEGA and SEGA Fave newsletters. No customer names, dates of birth, addresses, phone numbers, credit card details, or passwords were exposed, and SEGA Account emails remained unaffected due to a separate distribution system. ARARA's breach impacted nearly 380 clients and 77 million email addresses overall, with other victims including MOS Burger and Shochiku Multiplex Theatres. Attackers also abused ARARA's systems to send over 7 million phishing emails impersonating credit card companies. SEGA Arcade services remain offline from a separate, unrelated incident involving ALL.Net and Aime networks.
BleepingComputerNov 9, 2026Translated from English