Now Hacked
EN-GB
Data breach

Arara breach leaks over 1.07 million Osaka administrative service email addresses

First reported · Last reported · 6 related reports

SpilloverSpillover from the Arara incident · View original incident →

Unauthorised access to Arara’s external email distribution service resulted in the leak of 1,078,713 email addresses belonging to users of Osaka’s online administrative system. Email addresses of users and participating merchants in a separate gift voucher programme were also exposed. The City of Osaka urged residents to watch out for suspicious emails impersonating local authorities.

Key facts

Affected organisation
City of Osaka
Original incident
Arara email service cyber-attack exposes 81.33 million email addresses
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
1,078,713 email addresses belonging to users of the online administrative system, plus email addresses of users and participating merchants in a separate gift voucher programme
Cause / method
Unauthorised access to external email distribution service provider Arara
Location
Japan

If your data was exposed

Exposed dataEmail

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.

Timeline

  1. The leak of 1,078,713 email addresses belonging to users of Osaka’s online administrative system was confirmed.
  2. It became known that the City of Osaka had urged residents to be wary of suspicious emails impersonating local authorities.

Original incident

This is spillover from the Arara incident.

  • Data breachAraraKnock-on victims: 25

    Arara email service cyber-attack exposes 81.33 million email addresses

    81.3mImpact: 81,329,467 email addresses and some customers' member information

    Japan's Arara Message email delivery service was breached through a web server vulnerability, exposing email addresses and some customers' member information. Further investigation put the number of unique email addresses exposed at 81,329,467. The attacker also misused the service to send up to approximately 7.13 million emails impersonating credit card companies, and the company isolated the servers and suspended its email delivery service entirely.

    Related reports: 20 · last report →

6 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.