Japan's Arara Message breach exposes ~77M email addresses

What's the deal? Email-delivery vendor Arara Message disclosed a cyberattack that exposed roughly 77 million email addresses, making it the largest reported case in a recent cluster of breaches at Japanese email services. Up to 380 client companies may be affected. Credit-card numbers were not reported exposed.

Why now? The breach lands amid a wave of attacks on Japanese email-delivery vendors, several of which disclosed compromises in October. Separately, Yumil LinkDealroom has a profile for this one. Try Dealroom → reported a breach affecting a cumulative 51.6 million records across 49 client systems.

What could go wrong? The stolen data was already weaponised: the service was used to send as many as 7.13 million phishing emails impersonating a credit-card company. Breaching a single supplier lends fraudulent messages the appearance of legitimacy.

The 77 million figure is unverified and may include duplicates across client lists.

The signal: These breaches expose the concentration risk in email-delivery infrastructure. Compromising one vendor can spill customer data across hundreds of organisations at once — and turn that stolen trust into effective fraud.

Read more: japantimes.co.jp