INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Ara Ara Message Leaks 77 Million Cases via Japanese Email

| 2026-11-02 23:43 HIGH LOW DATA BREACH
JSON
Executive Summary
AI-generated
A Japanese company's email sending service for businesses, 'Arara Message', has expanded following a leak of approximately 77 million cases, affecting 380 companies. The attackers gained unauthorized access to the Arara Message server and then used it to infiltrate multiple service servers, leaking database information to the outside world. This hacking operation works by exploiting vulnerabilities in the email sending service's security measures, allowing hackers to gain access to sensitive user data such as names, phone numbers, addresses, and records of target recipients. The current status is that the company has suspended its service following the incident, with plans to resume it after a thorough investigation into the entry path, authentication information changes, and system security.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
JP
Incident Timeline
‎between October 28th and 30th
The company's credit card company was impersonated via email, with a maximum of 7,130,000 transactions sent between October 28th and 30th.
general_metric 7,130,000 transactions
The company's credit card company was impersonated via email, with a maximum of 7,130,000 transactions sent between October 28th and 30th.
‎2026/11/02
A Japanese company's email sending service for businesses, 'Arara Message', has expanded following a leak of approximately 77 million cases.
infrastructure 97 contracted servers
The company confirmed that it had checked the email addresses and member information of 97 contracted servers, and estimated that the number of affected companies was around 380.
‎November 2nd
Ara Ara Message's email sending service for businesses expanded following a suspected leak of approximately 77 million cases.
general_metric 77 cases
Arara, the parent company, announced this on November 2nd through a formal second announcement, stating that the 77,000,000 cases include a suspected leak range, and the actual number may vary depending on the results of a thorough investigation.
Tactical Metrics
Metrics
infrastructure
97
Contracted Servers
The company confirmed that it had checked the email addresses and member information of 97 contracted servers, and estimated that the number of affected companies was around 380.
Intelligence Sources
Dailysecu 2026-11-02