SEGA discloses breach at newsletter provider ARARA exposing 2.2 million emails
SEGA has disclosed that a data breach at its third-party newsletter provider, ARARA, exposed the email addresses of 2.2 million newsletter subscribers.
Written by a model from the sources below. Verify against them.
- Vendor
- SEGA
- Product
- Arara Message
- Status
- Confirmed
- Disclosed
- Data taken
- 2.2M records: Email addresses
- BleepingComputer: “Japanese gaming giant SEGA has disclosed that a data breach at its third-party newsletter provider, ARARA, exposed the email addresses of 2.2 million newslette…”
- ARARA
Summary
The report relies on SEGA's disclosure and does not describe other data types or the attackers.
What to do
Expect phishing that uses this breach; verify messages that mention it
For email addressesDo not click unexpected links or attachments claiming to be from SEGA
Check SEGA's official notice for guidance on affected subscribers
Timeline
- Made public by BleepingComputer
- First seen by cve.now
- Confirmed by SEGA
BleepingComputer: “Japanese gaming giant SEGA has disclosed that a data breach at its third-party newsletter provider, ARARA, exposed the email addresses of 2.2 million newslette…”
1 day - Record last updated
What was taken
2.2M records, perBluesky
| Taken | Per the source |
|---|---|
| Email addresses | Bluesky: “SEGA Corporation disclosed a data breach affecting 2,196,044 customer email addresses following unauthorised access to Arara Message, a third-party email distr…” |
Evidence 9
- Social
- SocialBluesky
“Gaming giant Sega has disclosed that approximately 2.2 million customer email addresses were exposed following a…”
- Social
- SocialMastodon
“Sega confirmed 2,196,044 leaked email addresses after the Arara Message breach.”
- Social
Show all 9 sourcesShow fewer sources
- PressBleepingComputer
“Japanese gaming giant SEGA has disclosed that a data breach at its third-party newsletter provider, ARARA, exposed the email addresses of 2.2 million newsletter subscribers.”
+1 more: BleepingComputer on Bluesky - SocialMastodon
“A security breach at SEGA's third-party newsletter provider exposed a whopping 2.2 million email addresses of newsletter subscribers, putting them at risk of spam and phishing attacks.”
- SocialBluesky
“SEGA has confirmed that a data breach involving its third-party newsletter distribution provider, ARARA, exposed the email…”
- SocialBluesky
“ゲーム大手のセガは、第三者のニュースレター配信プロバイダ「ARARA」で発生したデータ侵害により、ニュースレター登録者のメールアドレス220万件が露見したことを明らかにしました。”
Corrections
- Changed “Email addresses were exposed” to “Email addresses of newsletter subscribers were exposed”.
- Changed “Email addresses of newsletter subscribers were exposed” to “Email addresses were exposed”.
Something wrong on this page? Report an error. Every fix is listed here.
Questions about the ARARA breach affecting SEGA
Was SEGA customer data exposed?
Yes. The breach was at ARARA, a vendor of SEGA. SEGA says so: “Japanese gaming giant SEGA has disclosed that a data breach at its third-party newsletter provider, ARARA, exposed the email addresses of 2.2 million newsletter subscribers.” (BleepingComputer).
What data was exposed?
2.2M records. Email addresses.
What should SEGA customers do?
Expect phishing that uses this breach; verify messages that mention it. Do not click unexpected links or attachments claiming to be from SEGA. Check SEGA's official notice for guidance on affected subscribers.