Arara hack raises fears of nearly 2 million Shogakukan member records leaking
SpilloverSpillover from the Arara incident · View original incident →A cyberattack on Arara, Shogakukan’s distribution contractor, raised concerns that 1,993,665 member records, including Shogakukan IDs, may have been leaked. Separately, Shogakukan disclosed breaches exploiting vulnerabilities on two education and childcare websites and the possible leak of some member information. It logged all members out of the affected sites, reduced the information it retained, and reported the incidents to the Personal Information Protection Commission.
Key facts
- Affected organization
- Shogakukan
- Original incident
- Arara email service hack exposes 81.33 million email addresses
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Possible leak of 1,993,665 member records
- Cause / method
- Unauthorized access to distribution contractor Arara
- Location
- Japan
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
Timeline
- A cyberattack on Arara raised concerns that 1,993,665 member records, including Shogakukan IDs, may have been leaked.
- Shogakukan disclosed breaches of two education and childcare websites and the possible leak of some member information, announcing that it had logged all members out, reduced retained information, and reported the incidents to the Personal Information Protection Commission.
Original incident
This is spillover from the Arara incident.
Arara email service hack exposes 81.33 million email addresses
81.3MImpact: 81,329,467 email addresses and some customers' member information
Japan's Arara Message email delivery service was breached through a web server vulnerability, exposing email addresses and some customers' member information. Further investigation put the number of unique email addresses exposed at 81,329,467. The attacker also abused the service to send up to approximately 7.13 million emails impersonating credit card companies, and the company isolated the servers and completely suspended its email delivery service.
Related reports: 20 · last report →
5 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.