SEGA has reported in an official site posts that it has had a newsletter data breach which has in turn exposed a whopping 2.2 million email addresses. The breach took place at its third-party newsletter provider, ARARA. Thankfully it would seem as its just email addresses that have been leaked and no other personal identifiers such as passwords or credit card numbers etc. Another thing to note is that those who signed up to the newsletters with a SEGA Account were not affected by the breach. Here’s a machine translation of the message published on the SEGA site:
“SEGA Corporation (hereinafter referred to as “the Company”) uses the distribution system of Arara Co., Ltd. (hereinafter referred to as “Arara”) to send some email newsletters regarding the products and services of the Company and its group company, SEGA Fave Co., Ltd. It has come to our attention that Arara’s system was subjected to unauthorized access by a third party, resulting in the leakage of customer email addresses and other information used for sending email newsletters. We sincerely apologize for the great inconvenience and concern this has caused to our customers and all concerned parties.”
“Currently, Arara Inc. is investigating the cause of the unauthorized access and taking measures to prevent further damage. We are working with Arara Inc. and related companies to confirm the details of the leaked information. We would like to inform you of what we know so far and the measures we are taking as follows.
If any new facts regarding this matter come to light, we will promptly inform you through this notice.”