Now Hacked
EN
Data breach

Arara breach leaks over 1.07 million Osaka administrative service email addresses

First reported · Last reported · 6 related reports

SpilloverSpillover from the Arara incident · View original incident →

Unauthorized access to Arara’s external email distribution service resulted in the leak of 1,078,713 email addresses belonging to users of Osaka’s online administrative system. Email addresses of users and participating merchants in a separate gift certificate program were also exposed. The City of Osaka urged residents to watch out for suspicious emails impersonating local governments.

Key facts

Affected organization
City of Osaka
Original incident
Arara email service hack exposes 81.33 million email addresses
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
1,078,713 email addresses belonging to users of the online administrative system, plus email addresses of users and participating merchants in a separate gift certificate program
Cause / method
Unauthorized access to external email distribution service provider Arara
Location
Japan

If your data was exposed

Exposed dataEmail

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.

Timeline

  1. The leak of 1,078,713 email addresses belonging to users of Osaka’s online administrative system was confirmed.
  2. It became known that the City of Osaka had urged residents to be wary of suspicious emails impersonating local governments.

Original incident

This is spillover from the Arara incident.

  • Data breachAraraKnock-on victims: 25

    Arara email service hack exposes 81.33 million email addresses

    81.3MImpact: 81,329,467 email addresses and some customers' member information

    Japan's Arara Message email delivery service was breached through a web server vulnerability, exposing email addresses and some customers' member information. Further investigation put the number of unique email addresses exposed at 81,329,467. The attacker also abused the service to send up to approximately 7.13 million emails impersonating credit card companies, and the company isolated the servers and completely suspended its email delivery service.

    Related reports: 20 · last report →

6 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.