SEGA reported on Monday that the email addresses of 2,196,044 customers have been leaked after an unnamed third party accessed the systems of Arara, the company whose distribution system SEGA and SEGA Fave uses for their email newsletters. SEGA said that Arara is currently investigating the cause of the unauthorized access and is taking measures to prevent further damage.
SEGA has confirmation that email addresses and information associated with the newsletters' delivery have been leaked, but it emphasized there are no indications that customers' names, birthdates, genders, postal addresses, phone numbers, credit card information, and login passwords have also been leaked, as of the time of the announcement. SEGA also noted that a different distribution system handles the email addresses registered on customers' SEGA Accounts, and therefore the leak does not affect those addresses.
SEGA stated that the leaked email addresses leaked were from 11 affected newsletters sent in July, September, and October. Of the 2,196,044 leaked email addresses, 92,273 also had information associated with newsletter delivery leaked. Six of the 11 affected newsletters are tied to the " SEGA Lucky Kuji Online" prize game service, which is already undergoing maintenance, as part of security checks following a separate incident of unauthorized server access to SEGA Fave's arcade game network services.
SEGA Fave announced on November 2 that a third party accessed its servers without authorization, unrelated to the above leak of newsletter recipients' email addresses. The affected SEGA Fave servers are those for the arcade game network service ALL.Net and Aime (cards used by certain arcade games to store player information). The company suspended various related services for security checks on November 1, and services for some games remain unavailable. In addition to Sega itself, other companies such as Bandai Namco also use the affected services for certain arcade games.
Source: SEGA via Hachima Kikō
Disclosure: Bandai Namco Filmworks Inc., a wholly owned subsidiary of Bandai Namco Holdings Inc., is a non-controlling, minority shareholder in Anime News Network Inc.