About 227,000 customer email addresses leaked at Sumitomo Mitsui Banking Corporation
SpilloverSpillover from the Arara incident · View original incident →About 227,000 email addresses belonging to Sumitomo Mitsui Banking Corporation customers were leaked after unauthorized access to arara, its outsourced email delivery provider. No leak of account numbers or passwords has been confirmed.
Key facts
- Affected organization
- Sumitomo Mitsui Banking Corporation
- Original incident
- Arara email service hack exposes 81.33 million email addresses
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- About 227,000 customer email addresses
- Cause / method
- Unauthorized access to outsourced email delivery provider arara
- Location
- Japan
If your data was exposed
Exposed dataEmail
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
Timeline
- It emerged that about 227,000 email addresses belonging to Sumitomo Mitsui Banking Corporation customers had been leaked in the arara breach.
- A possible leak of email addresses held by Shimotsuke City following unauthorized access to arara came to light.
- Leaks or possible leaks of email addresses held by Kewpie, Mutsu City, Maker’s Shirt Kamakura, Ashikaga City, Nasushiobara City, and Fujiya came to light.
- Leaks of email addresses held by MS&AD group companies, Royal Hotel, Kakogawa City, and the Yomiuri Giants came to light.
Original incident
This is spillover from the Arara incident.
Arara email service hack exposes 81.33 million email addresses
81.3MImpact: 81,329,467 email addresses and some customers' member information
Japan's Arara Message email delivery service was breached through a web server vulnerability, exposing email addresses and some customers' member information. Further investigation put the number of unique email addresses exposed at 81,329,467. The attacker also abused the service to send up to approximately 7.13 million emails impersonating credit card companies, and the company isolated the servers and completely suspended its email delivery service.
Related reports: 20 · last report →
12 related reports
- 【速報】三井住友銀行の委託先に不正アクセス 約22万7000件の顧客のメールアドレスが漏えい（読売テレビ）
- 【情報漏えい】三井住友銀行の顧客メアド約22万7000件 メール配信委託先「アララ」が不正アクセス被害 口座番号や暗証番号の流出は確認されず
- 下野市でメールアドレス漏えいの恐れ 「アララ」不正アクセスで
- キユーピー、メアド12万件流出 アララ不正アクセス
- むつ市システム 不正アクセスでメールアドレス漏えいか 青森
- メーカーズシャツ鎌倉、アララ不正アクセスでメアド16万件流出
- 足利市、那須塩原市でメールアドレス漏えい アララ不正アクセスで
- 不二家、アララ不正アクセスでメアド14万件流出か
- MS&AD系、顧客のメアド3.2万件流出 アララ不正アクセスで
- ロイヤルホテル、顧客のメアド8000件漏洩 アララへの不正アクセスで
- 不正アクセスによるメールアドレスの漏えいについて
- サイバー攻撃によるメールアドレス流出に関するお詫びとお知らせ
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.