Unauthorized access to Japan email delivery service Arara Message: over 81 million email addresses taken, up to 380 client firms affected

PayCloud Holdings subsidiary Arara said its email delivery service Arara Message suffered unauthorized access; it first disclosed the incident on Oct 29, and its Nov 6 third report put the deduplicated number of taken (or possibly taken) email addresses at 81,329,467 ^[1]. Up to about 380 client companies are affected, some with names, gender, birth dates, phone numbers, member IDs and addresses, and iThome reports Shogakukan, BIC Camera, MOS Burger and SMBC among them ^[1][2]. Delete emails impersonating card companies sent from news@arara.com without opening links, and contact your card issuer promptly if you entered card details ^[1].

Industries mainly affected: Technology, Cross-industry

1. Delete emails impersonating card companies without opening their URLs ^[1].
2. If you entered card details, contact your card issuer promptly .