Naha confirms 15,700 email addresses leaked in external email service cyber-attack
SpilloverSpillover from the Arara incident · View original incident →The Japanese city of Naha said 15,700 user email addresses had been exposed through unauthorised access to Arara Message, an external email delivery service used by its online application system. This was a follow-up announcement on the incident in which unauthorised access was confirmed on 31 October 2026. It was confirmed that no other information, including email bodies, My Number identification numbers or application information, had been exposed.
Key facts
- Affected organisation
- City of Naha
- Original incident
- Arara email service cyber-attack exposes 81.33 million email addresses
- Incident type
- Data breach
- Occurred / detected
- 2026-10-31
- Scale of damage
- 15,700 user email addresses
- Cause / method
- Unauthorised access
- Location
- Japan
If your data was exposed
Exposed dataEmail
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- It emerged that 15,700 user email addresses had been exposed in Naha through unauthorised access.
Original incident
This is spillover from the Arara incident.
Arara email service cyber-attack exposes 81.33 million email addresses
81.3mImpact: 81,329,467 email addresses and some customers' member information
Japan's Arara Message email delivery service was breached through a web server vulnerability, exposing email addresses and some customers' member information. Further investigation put the number of unique email addresses exposed at 81,329,467. The attacker also misused the service to send up to approximately 7.13 million emails impersonating credit card companies, and the company isolated the servers and suspended its email delivery service entirely.
Related reports: 20 · last report →
1 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.