Asoview confirms 15,821,184 member records leaked via a contracted email service

The Japanese leisure and ticket booking service Asoview (Asoview Inc.) said a third party gained unauthorized access to Arara Inc.’s email delivery service “Arara Message,” which Asoview used for mailings, and that some Asoview member data entrusted to that service had leaked, totaling 15,821,184 records ^[1]. The leaked items include email addresses, membership IDs and numbers, names, gender, dates of birth, phone numbers, postal codes and areas of residence, and ticket purchase and usage information; the company said passwords and credit-card data were not entrusted to the service and are not in scope, and that no abuse causing harm had been confirmed at the time of the notice ^[1]. The company says it will not ask by email, SMS or phone for passwords or credit-card details; people who receive unexpected mail or SMS should not open the URLs and should delete the messages, and should not take suspicious calls; they should be wary of contacts that seek personal data or payment on the pretext of refunds, cancellations, prizes or identity checks, and should contact the card issuer immediately if they have already entered card details on a suspicious site ^[1].

Industries mainly affected: Hospitality & food service