The global cyber war · Companies and supply chains

PayCloud says unauthorised access to its Arara Message email service exposed email addresses of client companies

Reported2 distinct origins, 0 independent.

PayCloud Holdings said in a disclosure dated 29 October, the day it was made public, that unauthorised access to Arara Message, an email delivery service run by its subsidiary Arara, led to information leaking and the service being stopped; no source gives the day the intrusion began. BleepingComputer reported that Arara disclosed on 2 November that 77 million email addresses from nearly 380 corporate clients were affected, and that SEGA said 2.2 million of its newsletter subscribers' addresses were exposed. Nobody has named an actor.

When
29 October 2026
Where
Japan, Japan
What
cyber, software supplier
Attribution
Not attributed. No government, court or company has said who did it.
In the record
Published 2026-11-11 13:41 UTC

Sources

  1. Evidence Minkabu Media · Not yet classified origin: PayCloud Holdings disclosures, 29 Oct and 2 Nov · published 2026-10-29 00:00 UTC
  2. Evidence Minkabu Media · Not yet classified origin: PayCloud Holdings disclosures, 29 Oct and 2 Nov · published 2026-11-02 00:00 UTC
  3. Evidence BleepingComputer Media · Not yet classified origin: PayCloud Holdings disclosures, 29 Oct and 2 Nov · published 2026-11-09 00:00 UTC
  4. Evidence BleepingComputer Media · Not yet classified origin: SEGA notice, 9 Nov · published 2026-11-09 00:00 UTC
  5. Evidence GameBusiness.jp Media · Not yet classified origin: SEGA notice, 9 Nov · published 2026-11-09 00:00 UTC

History

Cite or reuse

The War Record, "PayCloud says unauthorised access to its Arara Message email service exposed email addresses of client companies", record ev-20261111-w6r3, version 1, https://thewarrecord.com/events/ev-20261111-w6r3/

This month's events as JSON (id ev-20261111-w6r3) · CC BY 4.0