SEGA has revealed that the email addresses of 2,196,044 users that receive the company’s newsletters have been leaked via a data breach. The data breach came via an attack by a third-party on Arara, the newsletter’s distributors.
In a press release, SEGA confirmed that there is no indication that customers’ names, birthdates, genders, postal addresses, phone numbers, credit card information, and login passwords have been leaked at the time of this writing. The company notes that those who have a SEGA account have not been affected. In response, SEGA has suspended the distribution of its newsletters, as it promises to “strengthen and reinforce its information management systems, including the handling of personal information entrusted to external service providers.”
SEGA Fave also recently reported a separate breach on November 2, which affects the arcade game network service ALL.Net and Aime. Cards used by certain arcade games can store player information, and since these are managed by Arara, they have also been leaked. Currently, Arara and SEGA are investigating the cause of the breach and is attempting to prevent further leaks. Both will likely share further updates if any arise.
In late October, Capcom confirmed that a similar data breach that affected over 11 million CAPCOM IDs. Specifically, an unknown third-party accessed email address records and records of date of birth, gender, country/region, and nicknames. In very few cases, Capcom noticed that some user’s passwords were changed, but not leaked. While Capcom opened up several support lines for affected users, SEGA has not currently done the same.
