SEGA confirms 2,196,044 newsletter email addresses leaked from a contracted delivery system

SEGA Corporation said on 9 November 2026 that a delivery system of Arara Inc., which SEGA and group company SEGA Fave used for some newsletters, had been accessed without authorization by a third party, and that customer email addresses used for those newsletters had leaked ^[1]. The company said 2,196,044 email addresses leaked, including 92,273 that also had accompanying delivery information; it said data confirmed not to have leaked at this point include customers’ names, dates of birth, gender, addresses, phone numbers, credit-card data and login passwords, and that email addresses registered for “SEGA Account” are out of scope because they use a different delivery system ^[1]. The company warns that the leaked data may be used to send unexpected mail impersonating SEGA or SEGA Fave or using their product and service names; people should not open URL links or attachments in unexpected messages or reply to them, and the companies will not ask for passwords or credit-card details by email, so such messages should be deleted without following the links ^[1].

Industries mainly affected: Media, entertainment & gaming

1. Beware of unexpected mail impersonating SEGA, SEGA Fave, or their product and service names .