SEGA Confirms Data Breach After Third

Cybersecuritynews •Abinaya • November 10, 2026

SEGA confirmed that attackers exposed 2,196,044 email addresses after gaining unauthorized access to Arara Message, a third-party service used to send newsletters. The company disclosed the breach on November 9, 2026, saying the affected records related to promotional emails for SEGA and its group company, SEGA Fave. The SEGA data breach also exposed information linked […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SEGA Breach Exposes 2.2 Million Email Addresses via Vendor Incident SEGA announced on November 9, 2026, that a breach at its email delivery provider, Arara Inc., resulted in the exposure of approximately 2.2 million customer email addresses. The unauthorized access occurred on October 28, 2026, affecting email addresses used for newsletters related to SEGA's products and services. The breach involved 2,196,044 email address records and 92,273 distribution-related items, but did not compromise sensitive data such as names, passwords, or credit card information. SEGA is working with Arara to investigate the breach and has suspended newsletters sent through the affected service. Customers are advised to remain vigilant against phishing attempts. Arara had initially reported no data compromise on October 29 but later confirmed the breach on November 3. The service remains offline as investigations continue. 9 sources 58

Extracted Entities

SEGA Confirms Data Breach After Third

The full story

Extracted Entities

Attack Types (1)

Companies (2)

CWE Weaknesses (1)